Most merchants in practice accept transactions immediately as soon as they receive the unconfirmed notification. The security is not 100% perfect that way, but it's still way better than the risk of getting a chargeback with a more traditional system.