Transactions are protected by 2FA, they have to steal your phone and know your bank password. Whereas with credit cards, you have a single shared secret (number + CVC) with all merchants. Just one merchant needs to leak it.