Not good enough. As an "Opt-out" with no password required, there will always be cases of unintentional purchases. This is obvious. IMO a company should be obligated to give refunds if their default settings are this way.
Reducing the barriers to payment this way does 2 things.
* Consumers are more likely to impulse buy. This can affect everybody, but severely affects people with low impulse control who can't manage money.
* Consumers are more likely to unintentionally buy.
Both are taking advantage of people.
It would be nice if there were consumer protections similar to "Explicit Consent" in the GDPR. I.e. Explicit Consent should be required when purchasing something.
> Reducing the barriers to payment this way does 2 things. * Consumers are more likely to impulse buy. This can affect everybody, but severely affects people with low impulse control who can't manage money. * Consumers are more likely to unintentionally buy.
This should be solved by easy and simple refund system (for example, like the one that Valve has). Not by taking away ease of use for people who know what they are doing.
For example, I hate when Steam asks me for CVV number periodically when I buy. If they asked to retype the whole CC number every time I would be less likely to even buy some of the games I want to play.
