They have strong canaries in place, namely certificate transparency. They wisely designed themselves in a way to prevent themselves from tampering.

It wasn’t that it was difficult. It was that it was just random. And no, driving further to the right alone wasn’t the solution either.

Because they’d need to be a third payment provider on top of visa and master card to make a real difference in this regard.