Some sensitive credit card details (eg expiration date) are visible in the Account / Payment Information section of the Roon website. Even if Stripe retains information these could be removed from Roon’s website, right?
The strong preference of course would be for Roon to ask Stripe to delete the full record so that neither company retains anything.