Persona collects far more info on you than a name and credit card number. There are also some obfuscation services for cards (will it reject a prepaid debit card?), which would require them to go through extra steps to get your actual identity.

>I don't understand why Anthropic would expose themselves to the liability; when arguably they have all the tools baked right in.

What liability? When has a company ever faced any significant penalty for irresponsibly handling people's private data?