> trust bootstrapping problem that could only be solved
Onus of proof is on you that it needs to be solved, as the alternative exists and is working well. Think of it this way: I have my trust in US dollar (because everybody else has it too); maybe I could give the same trust in Swiss franc, or Emirati dirham, or South African rand — but why would I? US dollar already gives me everything I need.
> it does generally protect you from merchant data breaches
And from rogue merchants, too.
> the original merchant can post some subsequent charges
This has never happened to me; however my original point is that Apple Pay gives me better protections than regular CC, and it was given as a response to your point of "exactly the same dispute protections". Apple Pay is better since using it leads to fewer disputes in the first place; once the dispute is happening, the protections might be the same.