Sales of apps seems to be occurring to accounts that are: "The payment is pending because it was made to an email address that is not yet registered or confirmed.". This despite our best attempts. We should be blocking sales of those or coping more gracefully with the outcome. But the sale shouldn't go through in my opinion.
Sounds like we shouldn't even mark an add-on as requiring payment until we can confirm the account. Hopefully something that can be done via API?
Yeah, I'd like the get paykey check in bug 697805 to block the paypal setup form. Also because a user can alter their paypal settings at any time, I'd like 710388 done too. All this is pending investigation with what happens when the payment chain is setup to mozilla. All bets are off until I see how Paypal responds to this in that scenario.