As a user, if I make a choice to buy from a developer direct, I already trust that developer and their billing system (like I trust whoever made my OS—there’s no other choice). I am definitely not trusting yet another third party and their PII management practices.