Yes it is, and I would recommend that you add the WA Security Assist behavior to the following pages...
checkout.php
confirm.php
By adding the registration/login requirements to these pages, your potential customer is not forced to login until they already have items in their shopping cart and are truly ready to make the purchase.
I would not personally force a customer to login to see their shopping cart contents.