Exactly how we deal with everything else that works across platforms: standardization. We've done it at least once before (SSL/TLS), I'm sure these rich and "amazingly smart" companies can figure out how to achieve it once again.
> Isn't there, again, some hardware security issues in play with that?
Is there hardware security issues with accept CC details on the web? Assuming the computer itself isn't compromised, the web seems to (again) have figured out how to deal with it across platforms, both OSes and browsers, why can't phone OSes do it?