Pretty sure that these are your browser settings, but I hear you. I will have a look at the plugin to force a confirmation for all mime types.
