I know that and I've never done it. I am a hermit.
That rule is largely in place to remove SE's liability in case someone logs on as your personal character and does stuff like deleting your gear and account selling though. Adding password confirmation to in-game real money purchases would still be a prudent thing to do just to really confirm its you and not your kid who picked up your controller while you were cooking dinner or whatever though.
