This option is more expensive because in addition to payflow link you will need to acquire SSL as the store front gathers payment information and posts it to verisign.
OpenSSL is free, though ...
Other than that your analysis looks good. I think for the standard toolkit option 1 makes the most sense. Option 2 seems less attractive for the standard toolkit though it could be attractive for individual site builders.