I'm curious about authentication. How do you make sure only authorized transactions go through without pulling out the phone (which would make having NFC on the

I'm curious about authentication. How do you make sure only authorized transactions go through without pulling out the phone (which would make having NFC on the watch irrelevant anyhow)?