It’s just a trade off to prevent a low cost attack. Personally I think it’s probably worth the minor inconvenience of dispenser closers waiting a few blocks once the cancel tx is confirmed.
At the end of the day, due to the nature of dispensers, we can’t prevent all attacks. A bad actor could always snipe by paying dispenser price with a very high fee and this wouldn’t prevent that.