Only for sites that you don't already have an account on, and which don't use a paypal-like service. Although since there are consumer protections on credit cards, it might make sense just to warn on bank account and routing numbers.

It doesn't have to. In both of those cases you're not entering your credit card number.

Cookies to indicate previously visited sites.