It isn’t the security of the transaction that is broken. It is the security of the servers and the encryption used in storing your card number. The only reason for a retailer to store your card number is to make it so you don’t have to enter it every time you shop online. it is entirely possible for the retailer to pass your card number on to the provider for billing without storing it.
