Thanks for the comment, I'll definitely pass along your thoughts. Right now, the sentiment over here is that collecting data in an iframe creates too much of a vector for phishing attacks, so that was the main driver in the decision to use a popup. But I'd love to find a way to mitigate that.