Nope, PGP doesn't protect you from a rogue vendor. If you take the proper security precautions (buying bitcoins anonymously, encrypting your address), there two unavoidable points where you must trust other people: you trust that the SR admins won't steal your money, and you trust that the vendor will handle your shipping info carefully.