I loved how you wrote that! Whenever people talked about stripe I always thought: Stop, wait! What if your server is compromised? You can do any change to strip

I loved how you wrote that! Whenever people talked about stripe I always thought: Stop, wait! What if your server is compromised? You can do any change to stripe.js you like using malicious injected code. Many people would just handwave that away, but you write it perfectly clear and give the reason why what stripe does still helps: It basically just avoids the PCI checks without being secure ;-) No, you wrote that it avoids having you inadvertently store the data. More people should write about obvious security holes so clearly and logically correct like you do