[saurik]

> (I assume this is the same for other payment processors, not just Stripe.)

AFAIK, this is correct for other systems that allow you to accept a credit card number directly; however, this is not true of all "payment processors": things other than credit cards often have more security that becomes the responsibility of the bank or customer; third-party payment networks also often take this on as "their problem" (as a specific example, Amazon Payments eats chargeback fines under the belief that they are handling fraud issues; PayPal, however, does not, although they do seem to be quite good at the fraud protection angle, so it matters less).