> I add the processor's JS, and it collects the data to move along.

Consumers aren't gonna notice the difference if the site gets hacked and that JS is swapped out for a malicious set.

Yea, it's insane seeing this person arguing about the nature of credit card theft when we have a million different examples of how it happens and how rarely the end user knows until it's far too late. We almost always learn about itpost ad hoc.