I have recently have read that the Credit Card (saved) payment method is not meant to be used on a live site.
What are the reasons for this?
I understand this method stores the credit card number encrypted in the database. Does this violate PCI compliance?
Is there any other reason then security risks?