I ran into something similar and ended up avoiding VoIP altogether for
any card data paths. For other communication, I switched to using sms.to
for sending out payment links, which kept everything out of scope and
way easier to manage. Took a load of...
