Yeah, I removed my payment info from all of my gaming accounts as a precaution after that big PSN hack several years ago. I've used nothing but codes and top-up cards on XBL ever since.