Some campaigns ask you to put your address in your profile page and don't pay if you change or remove it. A hacker controlling someone's account could not divert those funds to himself.