That's fundamentally a big part of the point: you never directly handle any payment info, which frees you from most of the tremendous liability and security concerns that come with directly handling payment info.