There are several open ideas regarding address with online forms - notably #4911.
If the donor matches due to email and name being perfect match, however the donor opts to not fill in the address completely - or intentionally enters bad address information to complete the form quickly - the system updates the address automatically to the newly entered address and there is no opportunity for reviewing to approve or not.
Our data manager currently reviews every email confirmation from donations against records to look for discrepancy with address information and has caught three just since the holidays this year. There needs to be some form of alert that address does not match especially when donor matches so that we keep accurate address information.