There are enough Israeli videos, texts, interviews & testimonies about IDF soldiers intentionally targetting children & bragging about it. No need to depend on Hamas communications.
In the rest of the world CC processing uses a PIN code + online revocation check (when the card is present) or a redirect through your bank (which hopefully uses some type of 2FA). Works a lot better & safer, and you should wonder why they pretend to need to violate your privacy in the USA…
Because the world runs on incompetence, so it's ultimately unavoidable (best case, you don't know that something important that you're relying on is run incompetently).
Honestly those are used as weights now in some kind of obscure calculation (or maybe not so obscure calculation but I still don't understand it).
What I really learned during that time is that mail servers have well known IP addresses and reputations. And you can say all you want SPF/DKIM fixes that, but the reality is when google sends your email (even with your custom domain) it gets received.