Say for example an encrypted wallet has 5000 addresses already pre-generated in the keypool.
getnewaddress be called via RPC command without knowing the actual wallet password?
I envisage a shopping cart script which calls
getnewaddress to provide a customer with an address to spend to. The shopping cart would know the RPC password, but not the wallet password. The shopping cart never needs to spend funds.
If the shopping cart was hacked, can bitcoin be stolen?