You're likely right, but they could always get crafty with Braintree APIs: https://developers.braintreepayments.com/ios+ruby/reference/...