I think Stripe's opinion is that their current business is already a privacy nightmare (being a payments processor) and that they've learned a bit about it thr

I think Stripe's opinion is that their current business is already a privacy nightmare (being a payments processor) and that they've learned a bit about it through the years so they feel they have the experience to do this right. I'm neither here nor there on Stripe as a company, but having worked with PCI and PII for many years, I'd trust a company more who had been through this process before.