Just got the email from CRC too. Glad to have some confirmation that they’re looking into it.
I don’t think they would actually lie about the 0.1% becuase if investigated they would end up in quite a bit of legal sh*t. I’m going to take their advice and pay via pay pal on future transactions until they come out with a statement saying that security issues, if any, have been resolved.