Wouldn't you just collect money from your website when they try to access your web services and collect money from your site? I really don't understand how they can do this without a username and password. And it's not compiled code, you can just view source and capture everything. It's like people have forgotten that they have a web browser on their phone. The concept of the OS is good for certain apps, but it's only going to work if Apple, Google and MS use it too (which they won't).