"without breaking the Web" isn't factual - it did break some features and hobble anti-fraud efforts for a payment provider that is often embedded in a third-party context.