By default, all iTunes store purchases are verified. Only if the user specifies that they don't want to have to confirm again does the store allow one-click purchasing. Though it would be nice if there were a big-ticket override, i.e. every item over $25 must be explicitly approved.