> That means the CC companies can't offload the financial burden of this

Most CC company (CCC) revenue comes from charging the poor people who can't pay their bills ("interest"). Merchant fees are only a small portion of revenue for most cards [1]. In the case of Discover for example it's less than 10% of their revenue, and in the case of Amex it's less than 33%. Other cards fall in-between.

[1] https://www.valuepenguin.com/how-do-credit-card-companies-ma...

There's a recurring myth, very prevalent in the US, that credit card companies would prefer people who pay off their bills every month as cheap margin versus being predatory. It's bizarre, and as you've pointed out, completely unsupported by how they actually make their money.

Your link explains that the issuing banks charge interest, not the credit card companies - which are merely the payment processors. I don't know all of the companies listed, it's possible that some are two in one and have their own bank as well. Some payment processors are partly owned by major banks too. But take the largest CC company, Visa: They don't extend credit at all, they don't even issue their own cards iirc. All their profit comes from fees, because the fees are too damn high™.

They've successfully convinced the public of the opposite though. It's a very common misconception that only "suckers" who buy on credit pay for it and that everyone else is getting a free service as long as they pay off their cards in time. In reality everyone pays because the merchants have to pay those fees and they pass the cost on to the consumer.

I used CC companies loosely as in {issuing banks + credit card companies} and their collective profit model.

> In reality everyone pays

Not really, credit card companies give you cash back if you pay on time, which is percentage-wise similar to merchant fees.

This seems to ignore losses and credit risk entirely. Someone who pays off their bill every month has no credit risk and the fees earned are unimputed revenues. I’m not saying their analysis is entirely wrong, but I would expect unsecured credit losses to be fairly high in the consumer credit market.

The incentive for payment providers to improve their security is a regulation called PSD2 which directly requires strong customer authentication.