[remx]

I never trusted Cloudflare's TLS/HTTPS infrastructure. Consider any CC information that could have been in their servers as already compromised. Stuff like that should be on a dedicated payment provider, and insulated away as much as possible. Stripe and other providers are perfect for handling CC, because it's what they do as a service.