Just started reading up on device security and open sessions and thought I would share. The most common mistake is skipping the small print. Came across a detailed breakdown that goes over payment provider fees. Sharing in case anyone else is interested. Handy background: this comparison