Skimmers would need a way to also learn the CVC2 from the back of the card to use it at most (but not all!) online merchants, but that's feasible using a small camera or a waiter/cashier accomplice doing the skimming.
With Google Pay and Apple Pay, and similar mobile wallets, that number is never shared during payments (and in fact not even stored on the device).
https://en.wikipedia.org/wiki/Chip_Authentication_Program
You need to read the entire card number + cvc2 + expiry date with your camera. That's not skimming, that's just taking a photo of the card.
https://stackoverflow.com/questions/14861908/apdu-command-to...
In the end, you'll always have to enter it on payment websites anyway.
