And it’s even better than you described. The one time token isn’t a new card number, it’s not a card number at all. It’s basically Apple saying “yep this is legit” to the other computer, and then the two banking systems do their money transfer on the back end.

Even if someone could intercept it and decrypt it, it would be completely useless because that’s just not a thing.

Pretty sure Google does basically the same thing. Never used it though.

As someone pretty high in both, I’d lose some empathy. Gets me me in trouble sometimes

Set up a philanthropic trust, invest it in a relatively safe mix of stocks and bonds, and set up distributions as a % of growth to a bunch of institutions I think are super important.

After buying a nicer house and paying off family debts and stuff of course.

Nope, not even a little