Ok I think I got it, it would be up to the contract to make sure any required `recipients` hook cannot be abused by a third party and in the `currency` case it's not a problem if either of the parties would like to stop the transaction from happening.

That's really powerful! I can't wait to try this stuff out on the testnet :)