To be clear, I believe Amazon's "I filled up my cart, let's check out now" re-authentication is a protection against Cross-Site Request Forgery. The point being, an attacker couldn't just send you a link, have you click on it, and you've now just accidentally purchased $3000 worth of questionably viable prescription medication.