During the internal review the team has informed us that the feature will only be available in a top-level context and limited to a domain list of trusted partners which decreases potential abuse risks. If those two aspects were to change in the future further discussions will be needed. The identified risks were potential cross-site leaks of supported payment providers and other malicious abuses.