According to ADA experts, once in the payment modal, a user can't exit without actually completing a payment. The close button is not a clickable event so when an impaired party tabs through the form the "button" never receives focus. Also, hitting the escape key does nothing at all. If the close button is made into a button instead of a div, users can exit whenever they want to.