So here we go.
Props to Jack Dorsey. I've never really liked Twitter as a platform or their stance on free speech (or lack thereof), and I don't (and won't) have an account, but Twitter has over 300 million active users each month who can now tip each other instantly and for free. Other providers are going to have to get on board or start losing customers.
One solution might be to make changing an address to be a “security event” which results in an email being sent to the user and/or requiring a delay before the changes address/invoice is displayed.
And then have a bunch of users complain that they lost/deleted their wallet or their wallet was hacked, and Twitter wouldn't let them change their address and so they lost a bunch of money which was sent to their old address. Although I suppose that is fixed by letting someone remove an address or invoice from their profile immediately, but require email confirmation and a delay to upload a new one.