Low hanging fruit getting picked, ecosystem will be a fortress in short order If the vendor updated BTCPay already you're good, no funds risk on your end but perhaps any fulfillment details could be exposed if not