I just tried flipping another 0.01 BTC to one of the main Receiving addresses generated when I installed Electrum.  As quickly as I hit send on my Android client, the History screen updated with my transaction, which so far is safe from Internet highway robbery.

Barring any other theories, it would seem that deterministic addresses generated from weak passphrases should be avoided at all cost (pun intended).

- Dave