The trick is to have good access controls so confirmations happen often enough to be useful, but not so often to be rubber-stamped