In theory, yes. I have thought about this as well. At the same time, you need (a) the device where the account has already been set up and (b) the master passw

In theory, yes. I have thought about this as well. At the same time, you need (a) the device where the account has already been set up and (b) the master password. I'm not exactly sure what an attacker might be able to do by changing the address, since by having both (a) and (b), he would already have access to your full account.