I feel the exact same way when I think about the number Drupal developers that have suffered through the long, hard journey of achieving and maintaining PCI compliance for ecommerce websites.
I didn't believe such a resource existed that was specifically tailored to the Drupal community.