God, I hate the internet sometimes. First the story came out that PSN was hacked and that Credit Card info that is sent to Sony via PSN isn't protected... few hours later we find out out that it is protected via SSL, same shit used on the web.
BUT in theory, CFW (Custom Firmware) could have it so if you 'send' Sony 'credit card' information, they will send it to them, uncompile it then send it to Sony.
But ... you can't get on PSN via CFW anymore... mute point?