Ahh, PCI, the thing that tells you (told you?) you need to use AES and nothing more, so people use ECB. Great security theatre indeed.