Cards captured in flight through guest checkout. Storing nothing protects the database and not the customer.
Thin harm spread across a very large number of uninvolved people is the kind nobody measures.