Although I agree with your premise, I don&#x27;t know if it would work out. Look at PCI compliance nowadays: it&#x27;s all bullshit. PCI is really there for the bank to pass the buck when something goes wrong. It pretends that it&#x27;s making things more secure, but IME, it does not.<p>I don&#x27;t know the answer to this problem though