you can email duck.com to forward your address to another address. Would't that create a super easy MITM attack if someone stole your address and forwarded it to theirs??