[the_mitsuhiko]

Mostly it's because of PCI DSS and dinosaurs in the market leaving very little customizability of the iframes they provide.