This is the reason I honestly sometimes prefer buying from smaller online businesses who are too small to do their own payment processing and instead outsource

This is the reason I honestly sometimes prefer buying from smaller online businesses who are too small to do their own payment processing and instead outsource it to a processor like Shopify or similar. They are probably taking a bigger loss than they would if they could process it themselves long term but at least I have relative peace of mind that I have used the service before, the certs stay consistent, and that they are likely doing a decent job with security in general (given that processing is their whole thing). A lot of times the look and feel of some of the process will be customized but for the most part you can quickly identify when its a payment process you have used before given the web forms. And of course it is easy to verify the cert after this.