I think people have been able to pay with crypto with many vendors through Debit cards such as the Binance one until they shut it down. I think CDC still has a card, but I dont use it anymore.

I am wondering what the next attack vector they will go for. The weak points seem to be an attack on miners and the network itself. I presume a fork of Bitcoin is in the medium-term future by the regulators. The wallets are just signing devices, so unless they will ban username and passwords, im not sure how that will do anything.