Isn't the problem of someone breaking in and stealing coins avoidable in the 'selling sth. for coins' scenario by just looking for incoming payments to a particular address, but without ever keeping any secret keys on a live system?