Security is a product requirement
Features ship with threat modeling appropriate to the sensitivity of receipts and totals. When trade-offs appear, we bias toward fewer surprises for users—not toward shipping faster at the cost of clarity or control.