FWIW, most small time devs aren't going to be "stewards of information" to any significant degree unless they're actively trying. Handling finance will be outso

FWIW, most small time devs aren't going to be "stewards of information" to any significant degree unless they're actively trying. Handling finance will be outsourced either way, using Stripe or one of many other 3rd party services, you wouldn't be processing any of that yourself. I buy a ton of 3rd party indy software on my Mac and always have, and nothing from the MAS, and typically the only "personal info", kind of, is an email and maybe my name (and it's not as if that's verified somehow, I could just put in whatever). I also have plenty of email accounts and can trivially make more, as well as developer-specific aliases. Plus there are other tools to further layer if it was ever a problem, like virtual credit card numbers. In practice the very nature of credit cards means it doesn't seem to generally be a problem, has been less of a real world risk than hacks of physical retailers. If I see a bad charge, I just report it and get a new number. Also FWIW, I've seen plenty of sites starting to offer Apple Pay as an option at checkout, I assume it's getting built into more payment systems now. That itself is solid defense, at least as good as the MAS though sometimes the checkout flows seem a bit wonky still.