Visa/MC do carry some risk, but the chain generally goes merchant -> acquiring bank -> ? platform (like Stripe or something) -> Visa/MC. So they care a lot about the people just above them in the chain, and not at all about the rest of them as they won't end up holding the bag.