This is correct. Since QB handles all payment information and data storage, they are the ones being required to be PCI compliant in which it says they are in th...
I agree with you as I just got the same email. If QB is the processor of all customer CC/ACH payments and I do not personally obtain any type of card or account...