BNPL services look easy, but they can be risky.