> ... when random comments or agent actions place orders

I believe that the purchase action must be triggered by a user manually in a specific "Pay <vendor>" UI element? It doesn't seem to me like any prompt could trigger a purchase directly. Of course this could change, but likely won't for the reasons you said.