Re: Opsec blunders and the hybrid laptop
"I would have thought online Credit Card losses were covered by the issuer. "
It is. Limit of liability for false charges on most credit cards in the US is $50.
However, the merchant's agreement with the card company generally also requires them to keep card data secured, with automatic penalties for failure to do so. I've seen agreements with penalties as high as $50k per stolen card number. That'll bankrupt a small business pretty quickly.