That's bad for readability (harder for the user to figure out which one of his cards was used), and it's bad security (since the number could be obtained over time or if multiple retailers did this). And of course, there's are times when two, one and even no digits are hidden.