Why is that silly? Anyone can build on top of the NXT API and put whatever verification checks they want in a client.

It would take a few days (or less) to hack together an "idiot proof" send money page that uses aliases, verifies the recipient account exists, and asks 3 times if you're really really really sure.