Ok so let me get this straight, at any time any online service can just change their code that despite any address you select to send to their server just injects what ever address they wish.
This means no BTC on any wallet online usage is safe in any way. Basically any govt agency can require service to point all addresses at a collection address or no where.
Would it not have been possible for the "user" to get their private keys and then load them into qt-client, then use that to direct and strong coin could have done nothing to stop this!!!
Also as good practice when sending large amounts always send a test amount first just to check everything is ok.
I would like to see a online service where this can't be done. That must surely be the next step. As things stand for hosted transactions atm....