Websites are a bit different; you can elect to not store your details, sure, but they’re still running it. Further; you give your card details over the phone, it’s conceivable they can then use it online.
Especially, for example, for food delivery. It’s best practice to not give details over the phone. Originally the whole point of the secret pin thingy (those 3 or 4 digits on the back that are printed and not embossed) were meant to allow you to give the number/name/expiry for the card and have something that prevents this. But these days, most delivery services will just use their website to ‘place’ the order for you.
That’s great for PoS terminals.
Websites are a bit different; you can elect to not store your details, sure, but they’re still running it. Further; you give your card details over the phone, it’s conceivable they can then use it online.
Especially, for example, for food delivery. It’s best practice to not give details over the phone. Originally the whole point of the secret pin thingy (those 3 or 4 digits on the back that are printed and not embossed) were meant to allow you to give the number/name/expiry for the card and have something that prevents this. But these days, most delivery services will just use their website to ‘place’ the order for you.