[w3c/browser-payment-api] should .show() be user gated? (#486)

Followup from #462. 

If the browser crashes and restarts by reopening N number of tabs. A tab in the background calls `.show()` and it now blocks all payment requests (at least, for a time - assuming it does not focus the tab, which is also not in the spec).

To protect from the above, should we then make it that `.show()` is gated on user interaction?  


-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/w3c/browser-payment-api/issues/486