>I like the "last 4 digits of a card" thing, as most people have come across this difference User convenience vs. security measure But it's never registered as a potential problem

As someone who is against the facebook data slurp, this is something I'd never really noticed till just now either.