This is true in many situations, but setting up full self-maintained payment processing isn't really a feasible option for small or even larger development teams. Payment processing is heavily regulated with many legal requirements, not to mention the countless security threats.