Yes, and Google did actual effort to implement it. Though if I remember the Google Wallet architecture correctly, I suspect that Google conveniently upgraded themselves to be part of the trusted parties (issuer + goog, instead of just issuer) - I have to investigate further to be sure though, so take this assessment with a grain of salt.

Either way, the ZKP is a damage control measure, not a fundamental fix.