Thanks again for your input. It's good to have someone trying to find problems. This is fundamental to science.
Now presently, even Dan the dev admits that technically it would be possible (even if unlikely) to lose coins during a transaction. I think you did a good job of explaining why (though I may have misunderstood).

Are you now thinking that "multi sig" will solve this potential problem?