-
Scary, because totally plausible. Don't take unnecessary client side dependencies. Also, using only plain old HTML+CSS for login and payment pages is a good idea. hackernoon.com/im-harvesting-credit-card-numbers-and-passwords-from-your-site-here-s-how-9a8cb347c5b5