The new checkout of paypal make me feel insecure, can't a user trigger a fake payment on the cilen