Vulnerability in EPiServer.Forms
One can add "HandlingTotal" to an order form, which makes sense for additional fees and such (i.e. an extra fee when paying with method X or shipping with method Y).
This adds nicely up to the final total which is displayed, but the handling cost itself is not displayed within the Commerce Manager. Which it should.
I have registered this as a bug. Thanks for bringing it to our attention!