Well done. I realise now that there are two Sermepa modules. I assume that you're using the recent one.

This is a hugely better version than the old one, but it does do something really, really dangerous - as you've identified. Specifically, on callback from the gateway, instead of integrating with Zen Cart's order completion processing, it tries to replace the entire process with its own version.