Interesting problem, but I don't think it will actually be that big of an issue. The merchant could generate a new wallet for every customer, and simply "dump"

Interesting problem, but I don't think it will actually be that big of an issue. The merchant could generate a new wallet for every customer, and simply "dump" any wallet under attack by said customer.