Letting users transmit sensitive data using outdated software riddled with security issues, just because you love to take their money in whatever unsafe way they have at their disposal, does not seem very ethical.
And actually, major banks and payment systems have decided to disable obsolete protocols. Because it impacts only systems carrying payment information (you're free to use unsafe encryption for other things, PCI won't give a damn, just not to carry credit card numbers).
It's been done around here, and just so you know, logs showed it was actually a small percentage of users that would be impacted, less than 5% of those doing payments over the internet. Still not small enough, but too bad for them. If they'd lose their money, they'd be even more upset than not being able to order pizza using the pirated and unpatched WinXP they installed on their granddaddy's PC.
Biting the hand that feeds IT
