Yeah, heavy transactions like purchases need special care, but that's true in general. At least you'd want a confirmation from the user. In our case, a simple

Yeah, heavy transactions like purchases need special care, but that's true in general. At least you'd want a confirmation from the user. In our case, a simple command queue solved the vast majority of use cases, and the corner cases were not disasters but at worst somewhat confusing.