> Ever since I switched to nearly exclusively using Apple Pay for physical shopping I’ve had no unauthorized charges

BIN attacks [1] are still a thing. Your banks are probably just better at blocking them.

[1] https://stripe.com/en-sg/resources/more/what-are-bin-attacks...