Nor a properly documented procedure seems to exist for random people (me) to report blatant PCI-DSS violation they stumbled upon. PCI-DSS is barely better than

Nor a properly documented procedure seems to exist for random people (me) to report blatant PCI-DSS violation they stumbled upon. PCI-DSS is barely better than security theater, with so litte effort spent on finding violations...