It shouldn’t be an issue given that for compliance reasons they don’t store credit card data and instead use a third party, and even if they got access to the A

It shouldn’t be an issue given that for compliance reasons they don’t store credit card data and instead use a third party, and even if they got access to the API keys for that provider, they shouldn’t have access to enough data to somehow use your card.