I don't see how that changes things at all... The payment gateway still gets the info, you still need to enter the info somehow, and in most proper e-commerce implementations these days they don't have access to the cc # anyway.
What changes except adding more work/failure-states/encryption at the one point where it does not matter?
What changes except adding more work/failure-states/encryption at the one point where it does not matter?