PCI compliance is for a vendors. Stripe has to be careful with credit cards leaking out of their CC vault, but if I'm an idiot and I tell you my credit card number that's on me.