Sorry, I do not understand exactly how CLAM works, but when someone is generating an address for you, wont he have access on the private key as well and thereby the ability to spend your fund on that address in future ?
It's more about how vanitygen works. If you give it a -P pubkey argument, the private key won't be useful for anyone who doesn't have the corresponding private key. And I only posted the pubkey.