Currently anyone with desktop can accept an estimate even if the settings state card on file is required. Yes, they get a popup but they can easily bypass the popup. Instead, the CRM should reinforce the decision to require card on file unless the setting is turned off at the global or account level.