To capture the benefits of embedded payments without introducing new vulnerabilities, infrastructure must have security deliberately designed into the payment flow.