I recently stumbled upon an article that really hits on a good point, regarding PABP compliance, and PCI compliance:
PABP Compliance Does NOT Imply PCI DSS Compliance
The short of it is that if you use a PABP compliant software, this does not imply that you are PCI compliant.
Thank you for the link. It’s important to remember that PABP (now the PA-DSS) is meant to ‘enable’ compliance but not act as magic pixie dust to bring compliance for all.
That being said, using compliant payment applications can and will have a large impact on the security of Level 3 and 4 merchants.