Really bad opsec. There are no perfect tools. You have to know how you are exposed and where you can't trust third parties.

You enter a credit card into a web site. You are screwed in most cases.

Like all companies including Stacker.news. The police come, you hand stuff over to them. Grownups realize that they are inheritly trusting companeis. The thing to look for is when the company makes it so they don't have much of value to turn over.

Bottom line, it's up to you. No company is gonna go to prison for you. If you are dumb, you're gonna pay the dumb tax