Hi FreeMoney,
I think you are right about that initial private key in the wallet.
I think what I will end up doing is:
+ the wallet that is created by default for new users will have one address in like now and initially be unencrypted. This is for usability for newbies.
But - when you click on New Wallet you will open a tab where you select things like:
+ wallet location
+ description
+ wallet type
+ number of keys to put in it initially
+ password
That way a new encrypted wallet will only ever have existed as encrypted.
That will probably go into the next round of "UI work".
Also, change (in the 0.4.23 release and the coming 0.5.9beta release) now goes to the SECOND address in the wallet - if it exists - so that the initial key is not used. This I put in as I found people were importing keys from "somewhere" and then not liking that the change was not going to one of their imported keys. This would also fix change going to a key that was at one point stored unencrypted as you point out.