Nah its just the payment processors

Its only a matter of time before a service relying on a Metamask extension on a cheap Layer2 is extremely popular

This will be much much harder to police so its kinda of counterproductive to go after permissioned centralized services as it accelerates the inevitable