With that title I was hoping to read a good conspiracy story about Square running some form of malware stealing users' data: I'm disappointed.

Change the title. Or make up a malware story to go with the tone of the title.