Appstore Security

[yannv]

I'm thinking if you go to a paid apps page and want to buy it you must enter your username and password on that screen to download, this stops accidents such as people leaving sessions logged in etc.

Not unreasonable, but it could be an option (as it is on PSN). The detail I hate with their system, though, is that there's no such option for card charging. So there's no confirmation for them taking your money, only for you using it.