We at Stripe (and more importantly, our PCI auditors) don't agree with this assessment of how the chain of responsibility works.
When you use Stripe.js, you need only serve your page over SSL and verify that you aren't collecting credit cards through other means to be PCI compliant.
When you use Stripe.js, you need only serve your page over SSL and verify that you aren't collecting credit cards through other means to be PCI compliant.