Could not the customers credit card information be stolen from the internet/sketchy store/night out and then be used by the hacker to order food? Hard to say who is at blame here.