Even if you set it up that way intentionally? What if you route through a server designed to confirm the payment?
Discussion
Seems like a major flaw... What if Amazon wanted to let you pay the merchant directly, but still handled order confirmation and delivery?