Can Payment Request API be abused by Cybercriminals?

[Ink]

Payment Request API coming to Edge in Creators Update

Spoiler: About Payment Request API

Simplier Web Payments

With the Payment Request API, payment information is provided by the wallet (once the user has granted consent), as opposed to being collected via a checkout form in the website. The browser mediates all the information passed between the wallet and the merchant.​

Details: Simpler web payments: Introducing the Payment Request API - Microsoft Edge Dev Blog

Online shopping gets even easier: Late last year we introduced a preview implementation of the Payment Request API for Microsoft Edge, which will work with Microsoft Wallet on Windows 10 PCs to make online shopping easier than ever.
On participating web sites, users will have the option to checkout quickly using their payment information stored securely in Microsoft Wallet so they don’t have to navigate through traditional checkout flows and repeatedly enter the same payment and shipping address information.
​

Source: Microsoft Edge helps you organize your web - Windows Experience Blog

It mentions participating websites, but is it possible for this to be abused by Cybercriminals and Ransomware (although Bitcoin is preferred)? And is this API restricted to Edge, or permitted for Store apps and desktop apps as well?

 

[Exterminator]

I believe they shut down the wallet back in 2001 over vulnerabilities.
I would say yes.
I would imagine all types of digital payments are vulnerable to compromise.
Here is a good article on the topic Microsoft Wallet enters the mobile payments fray: Is the industry secure? - Help Net Security