[JimDabell]

Physical goods need to be shipped somewhere that a thief can receive them. Digital goods don’t. That makes it much easier and safer to make fraudulent purchases for digital goods.

[nrmitchi]

Yes, and that is a valid point if you are a thief who is looking to buy something. Ie, the cardholder is not the one making the purchase.

But if you are a valid consumer, making a valid purchase with your card, the purchase being fraudulent is not the concern.

The "safety" implication is that any company that is not Apple will lose your payment information, or your payment info will be intercepted, etc.

There are many companies who are perfectly capable of handling PCI that are not Apple.