I do not see the security of the offline cc process where you enter an email adress and two emails are sent one with first 4 and last 4 and the other with the middle 8. But you can't view the whole thing in an encrypted admin module.

Way easier to hack intop un unencrypted email account than to hack into the encrypted admin module.