I agree with you entirely. They should use a secondary level of verification than denying service by canceling transactions randomly.