But not paying with Apple is a risk. Handing out your payment info to any random website isn't the same risk profile as paying with my Apple account. The popups are fair given that this is a new interaction for users. As someone who has for over a decade given/recommended Mac/iPhones to tech illiterate people, I would be appalled if they didn't do this.

Developers forget that users also have a relationship with Apple.