I mean, with some Stripe implementations, for example, you are trusting the merchant not to store the CC # before sending it to Stripe for tokenization, whereas w/ PayPal your CC # is only ever entered on PayPal.com.

I say this as a person who hates PayPal.