Well, it turns out that aD itself is re-thinking double-click protection, but not for the reason raised by Carl. They've run into a couple of interesting cases where the simple protection utilized by the ACS falls apart.
<p>
The article is <a href='
http://muc.arsdigita.com/secure-doubleclick-protection.html';>here</a>.