I've worked at shops that don't meet PCI DSS. It's a sticking point, and we WANT to comply, but also don't want to spend the money to comply, and the processor wants us to comply too, but they'd rather have our business than give us the boot for not meeting PCI DSS.