But what happens is that the customer invariably screams "I was hacked" when the line item comes on the bill. Then the chargeback happens anyway. Sure, the merchant isn't held financially liable for it, but they are still noted as having that chargeback. And they'll still hit that high percentage of "fraudulent charges".
And that's the real problem. Nobody will touch them because it costs too much to do so.