That's on paypal, and is something they would likely have fixed already if it were the default behaviour.

As for what normal users want, I would presume most of them would want to be safer on the web.