but (a) the protocol allows for an insurance scheme to protect the recipient when he accepts a tx without confirmation, so he need not worry ...
(b) there are paid services that will analyze an incoming tx and let the recipient know (with insurance) if it is safe to accept. (e.g. http://www.gap600.com)