someone could make a program to double spend. You need huge hash power to make it past a block, but you can broadcast unconfirmed transactions all over the place. Still, the odds of someone going to the trouble over a few bucks is amost nothing at this point. Bitpay should offer to cover a loss of a small amount for accepting unconfirmed transactions, and when/if it happens, then make everyone start getting one confirm. Way too many merchants are demanding tons of confirms and slowing everything down on stuff that no one will ever try to double spend on. Prepaying an hour in advance sounds stupid. I want to pay like the hot girls in bitpays video:)
This is exactly the right approach. The risk of fraud accepting bitcoins instantly is so small compared to accepting a credit card instantly, that yes at some point we would just guarantee the order under a certain dollar amount. We aren't ready to offer that yet, but we know what we software we need to build to make it happen.