The issues you are raising are indeed real issues, that will be eventually addressed. And that "eventually" largely depends on the pressure that privacy-minded consumers create.
And just because they are not addressed yet, it doesn't mean we shouldn't care about fixing other weak links.
Es, my CC company can infer a lot about me. Yes, they may even be selling that information to others. That doesn’t mean that I want anybody who can MITM my requests to be able to see what I’m doing (or, worse, send me forged content for whatever purpose).
Merchants rely on cc info to track consumer behavior.
Projects like ShopIn.com give me hope that blockchain may decentralize this data and put control back in consumers hands.
If they decide that’s important to them.