Can this be foolproofed somehow before going mainstream? I'd hate to think of all the posts on the forums when people start losing BTC. Maybe the BTCpay operation can accept an order match number as an optional parameter and the escrow time extended if necessary for the amount of that specific order only, provided BTCpay is called before the offer expires. The number of blocks to extend would be based on what the protocol determines is reasonable at the time or could be hardcoded initially.