There are enough Israeli videos, texts, interviews & testimonies about IDF soldiers intentionally targetting children & bragging about it. No need to depend on Hamas communications.
In the rest of the world CC processing uses a PIN code + online revocation check (when the card is present) or a redirect through your bank (which hopefully uses some type of 2FA). Works a lot better & safer, and you should wonder why they pretend to need to violate your privacy in the USA…