I am sure it is enforced on the Stripe backend. Basically it sounds like there are two options: 1. Do not set the script parameter, let Stripe collect the data

I am sure it is enforced on the Stripe backend. Basically it sounds like there are two options: 1. Do not set the script parameter, let Stripe collect the data, and have them do fraud detection, which will result in better risk scores and more transactions approved. 2. Do set the parameter, prevent Strip from collecting the data, and prevent them from doing the fraud detection (since they have no data to feed the detector). This may result in a higher risk score (meaning higher fees) and/or fewer transactions approved.