What is the main reason my second scenario is not ideal? Is it the re-use of the payment address because now, that can be tracked and reduces anonymity? Or are there any other reasons? What about any increased risks?
Primarily because people can track someone's payments to a site and reduces the anonymity.