PSP = payment processor
Unfortunately, yes, there is no such thing as zero risk.
Even though cloaking configurations are very safe, I think there is a risk of being banned if the deception is ever detected.
In reality, even if you get banned or something, there are lots of ways to get around bans and easily set up a new store. (If a store gets banned, it will only be store B, the one that takes the money. It's impossible for store A to get banned.)
And even if the store is banned, it will not be banned for counterfeiting because Shopify has no way of tracing the store A if the setup is done correctly.
So they have no proof that the products are high risk, but they can still ban them for strange patterns or other reasons.