I'd weaken that to "may be rejected."  The merchant might be perfectly happy to handle 1MB Payment messages.