There is the BT card reader for all the Android and iOS devices where on device controls ensure the security and compliance.
With the virtual terminal everything is done 'in the cloud' and there is no app or Mac or Windows, I would assume for the same compliance and security reasoning.
You can use a connected terminal alongside the virtual terminal, so your customer then interacts with that unit to complete the payment. This is the way Square keeps their security controls and software compliance checks.
Visa is slowly phasing out swipe strips from their credit cards and credit card numbers. You will be able to get a one-time use card number for online transactions or use Passkey.
