I wouldn't publicly shame companies that might be regulated by slowing moving policies. Anyone who collects payments (any start-up that wants to stay around for

I wouldn't publicly shame companies that might be regulated by slowing moving policies. Anyone who collects payments (any start-up that wants to stay around for long) is required to follow some form of PCI which currently still has really bad rules. You can disagree with the rules but if you don't want to get in trouble, you have to follow them until they fix them.