As long as the API provider specified what a “success” response looks like, the fault goes to the API consumer. I also find it crazy that anyone would consider

As long as the API provider specified what a “success” response looks like, the fault goes to the API consumer. I also find it crazy that anyone would consider failing open for a payment API like this, at least not without a lot of forethought and oversight. Failing open can make sense in some cases but even for a company heavily focused on growth…it seems like a horrible idea.