I love how tumblr wasn't even able to, or didn't even try to get Paypal or google play or something on board to handle the Post+ payments.
No, they straight up went: "just give us your credit card info, don't worry, it's save with us, we promise."
Knowing tumblr, they probably store all that info in plain text, in a file called "pls don't steal this or our lawyers will have a freaking aneurysm"
You know... the same way they tried to stop people from downloading MP3s...