I hope they have some guardrails when it comes to payments. Other sites could just use prompt injection methods to get them to pay, no?