So then the problem of having to change the information for any recurring payments you have is obviated by a total inability to set up recurring payments? I suppose that's one solution.
I'm 90% sure recurring payments still work. I can't imagine them going to market with something like this without considering recurring payments.
IIRC for recurring they can use the same token or they get a slightly different token. Either way it's like using a different card with each merchant so you can easily track back who got hacked.
Nope. Recurring payments can use the same token, but that token is not a card number that can be presented to another merchant if stolen. Also, if a vendor is breached, only the tokens need be invalidated.