The credit card skimming issue was pre-Covid or early Covid if memory serves me. I was one of the many that had their cards skimmed back then. Annoying, but the CC company ate those charges.
Someone here posted that the 3rd party payment company that XR used caught the person doing it, no idea if that's reality. But I don't recall anyone in the last 2-3 years or so having their cards skimmed after ordering from XR.
They aren't the only CGN sponsor to have skimming issues, but it certainly isn't a good look.
That being said I only started ordering from XR again in the last year or so. Mainly because they had stuff that I simply couldn't find in stock anywhere else after looking for months. I've ordered 2-3 times without issue.
I generally look for things locally first, then from Henry (BSS) or Eagle, with XR down the list. But I think they're good to go these days from a credit card security standpoint.