They might not do anything nefarious and simply get hacked and now the whole world knows all your purchases, would that also be fine? I'm not saying this as if crypto solves it, because it doesn't, but that's one possible risk of someone having access to all your purchase history in one place.