I was talking about buying from online merchants. I’m less familiar with the security implications of chip-and-pin or contactless card for in-person transactions. Do those technologies prevent the merchant from getting raw CC info?

Rightly or wrongly, I worry less about the security implementations of hardware point-of-sale terminals than the security implementations of small websites.

I mostly prefer Apple Pay for in-person transactions because of anonymity — my understanding is that it makes it harder for companies (other than Apple) to track my purchases.