~snip~
You're right with your assessment, but you always have that risk in a
trust chain. The reason we're going through the effort of sending it from person to person is that we want people to hold this thing in their hands, share it, show it to friends and anyone that's interested. We're not about being the most efficient charity out there, just completely different.
So are you just doing this solely because of marketing or you want to give the donor a firsthand experience on how he can be part of the charity? Either way this is really risky, I haven't even mentioned anything about the risk on how it could have problems with your courier (from delays and damages to theft) and I think eternalgloom is currently experiencing it now with the delay in shipment. At least just make the piggy empty and don't store the wallet's private keys inside of it, it removes the temptation for the donors on stealing it and there is really no point on adding it when already receiving the DigiPiglet is something they need to look forward for.
I want to do both + I want people who never experienced Bitcoin before, to hear about DigiPiglets and get to know how (easy) Bitcoin works. When I showed the DigiPiglet to people and explained how it worked, it was much easier for them to wrap their head around, than when explaining Bitcoin in theory. We can minimize risk if we personally hand it to others. I was hoping the piglet would find a Bitcoin community hub somewhere, where a few people could hand it to each other personally before sending it to a different country.