Huh, I guess I should try that mode of using Windows. E.g. local login, with Microsoft account only signed in in Store.

A bit surprised by the remark about credit card number: of many tech companies, Microsoft is among the last I'd expect to mishandle it.