maybe this is already obvious to you, but a disposable address only hides your location to a certain degree. an untrustworthy vendor probably couldn't figure out your exact address, but I bet they could narrow down your city/town by requesting shipping quotes from many different locations and triangulating via price differences.