adding a button means osascript driven malware could approve itself and you might not even see it happen