Click-to-cancel requirements appear unavoidable