Google Adwords do this, and vultr.com do it as well. I agree it's really user-hostile and a dark pattern to allow users to enter payment details and then refuse to delete them.

I don't want to leave my credit card details on the servers of hundreds of companies, or allow them to charge at will, but it's obvious why from the companies point of view why this is attractive.