Tor only encrypts your address up to the server, you use GPG so it is encrypted from you all the way to the vendor. Absolutely nothing SR does can adequately encrypt the address on the server, it absolutely requires client side encryption for it to be stored on the server encrypted in a way that will make a difference.