That's fundamentally a big part of the point: you never directly handle any payment info, which frees you from most of the tremendous liability and security concerns that come with directly handling payment info.
Indeed. And with the upcoming stricter EU laws on data handling, I think this is a big plus.