He came on the shortcomings because he used that directly in google, with no third-party (actual third-party controlled app, or self-controlled).

www.reacher.me has the exact same function as what he described, but I wonder if the shortcomings are the same, given your own email doesn't send the payment request?