I have one question though. Wouldn't it be possible for the service operator to change the address the openalias points to and start stealing payments?
Its not in my plans, but yes its possible, you will have to trust the provider (even at top domains we have to trust the provider)