I'm glad I'm not the only who noticed that.

As a further note, the same requirements are used for merchants and service providers. It makes no difference whether or not you are the merchant, and it makes no difference what "level" you are (ie: how many transactions you process), you get the same PCI DSS.