Totally secondary, but we could solve this by not giving the revenue rights for pubic good (parking meters, expressways, etc) to private companies which then have random toll websites. Just saying.
However, I did find it painful just now to find who etimspayments.com is since they're using domain privacy even though they are the SF provider https://wmq.etimspayments.com/pbw/include/sanfrancisco/input...
I was just talking to a friend and he put in a CPRA request to find out which LLC provides that service so we'll know soon enough.
Why couldn’t the highest bidder handle the payment and processing at e.g. tolls.gov?