Reminds me of this guy at Spicecorp one time. He thought he was cock of the walk, talking about PCI compliance. He made a statement that wifi can NEVER be used per PCI compliance.
Like HIPAA, PCI compliance is a guideline, there is nothing verboten. Yes, wifi could be "hacked" but also leaving interfaces unsecured is also a violation.
Of course, I love the "cloud" hosts who claim they are HIPAA compliant.