The most obvious flaw in Apple’s scaremongering re: web payments is that people already manually enter credit card numbers into App Store apps in order to purchase physical goods!
If there was meaningful risk of fraud due to people incorrectly assuming that these card numbers were being securely handled by Apple, wouldn’t it be showing up here already?