The main problem is with credit card charges (in some other foreign countries) still allows charges to go through with just the cc and cvc number than can be brute forced multiple times. If all cards charges requires MFA or TAC before allowing the transaction to go through I believe such cases will go down drastically (until the evil ones find the next loophole).