I just had my Tesla serviced at home by Tesla service. For payment, the service person took a photo of my credit card and sent it to Tesla for processing. It was done before I realized what happened. I called Tesla to confirm this is standard practice, and they told me it is if the person doesn't have internet access at that point.
A photo of my credit card with CVV is potentially in this person's cloud photo collection, shared with God knows who. It is also floating around in Tesla's system, potentially as an email attachment, and potentially accessible to a large number of people. Incredibly dumb solution on Tesla's part. And I'll probably have to get a new card.
I complained to the service rep on the phone, but there really isn't anything I can do about it at this point.
If you're in a similar situation, I'd recommend you don't let the person photograph your card and find some other way to pay.