I dont know the implementation of this but I have allow website to check for payments disabled. What is to stop every web site from putting this on the homepage

I dont know the implementation of this but I have allow website to check for payments disabled. What is to stop every web site from putting this on the homepage or every page? The API says they can get your address info but at least payment info is behind a user prompt.