The thing is that when the reasonable solution is "Stop the company doing its core competency" you need to realise that almost everything else the company does is going to be "exploit whatever it has left". So forcibly shutting down the company is far more reasonable than just stopping it from collecting credit information.
