bkolobara oh man, look where the world is going, soon you won't be able to do anything without interacting with chat bot. Anyway simple confirmation step solves the problem.
As far as I understand, it's not for trading, but for one-time exchange, like path payment. And it could be useful, why not. The main question here is where the secret key is stored. Does bot signs transactions? or user does? or bot just provides payment links, which can be handled by user wallet app?