That's why Apple's Wallet might be better: it depends on device-level security including elements stored on-device that Apple does not have and without which Apple cannot decrypt the information. There is obviously some sort of syncing between devices, but each device is authorized separately, and apparently Apple cannot view the Wallet data on its servers. Yes, it's a walled garden, but I trust Apple more than Facebook, Google, or X.