Not sure if this is just Security Metrics drumming up business, but it seems like Braintree has partnered with them and they (Braintree) want you to pass a SecurityMetrics test *and* have all the PCI documentation in place.

Could be a reason to switch to Square. We'll see.