This is the common behaviour in most ecommerce sites so is a reasonable assumption. When money is changing hands, verification should be standard practice.
By default, all iTunes store purchases are verified. Only if the user specifies that they don't want to have to confirm again does the store allow one-click purchasing. Though it would be nice if there were a big-ticket override, i.e. every item over $25 must be explicitly approved.
