> Wouldn't it be just a server side to stripe call on a form submit? Even easier than using js (probably not as good user experience wise)
Sure! You just have to also handle PCI-DSS.
One of the nasty things I've had to accept about PCI-DSS is that if you think you have a clever hack for getting around it, you probably don't. It's really a remarkable work of standards authoring.