Do you suggest that if you use a phone as a wallet then that phone was never bought? It was. And obviously a shop that sold it to you also could have a data breach making your shipping address go public.