To those who worry about someone retaining a copy of a wallet.dat...
I expect that at some point I may pay someone by giving them a wallet.dat (or access to a wallet that they may already have whether they know it or not.)
I would not expect it to be a major problem that I may have kept a copy. I would expect that the recipient would immediately open the wallet and at least verify the addresse(s) in it with block explorer, and they may as well go ahead and empty it at that point in whatever way they choose.
It would be possible that I give someone a wallet.dat for a legal transfer and it is passed around in that form for a few more transactions before being drained. This would provide a pretty good amount of (plausible) separation between me and the next time the coins popped up in the transaction logs.
So they pull the money out of the wallet.dat and send it to their address...how is this any different than you just spending it directly to their address?
If I don't send BTC to someone's address then it would be difficult to prove that I did and pester me about my connections with the holder of that address. This redresses some of the deficiencies of Bitcoin relative to cash.
If a wallet.dat (encrypted) got on to a lot of people's computers somehow, and I got the password to whatever entity managed to provided me with something that I wanted, it would be cumbersome and expensive to trace the relationships between different individuals.
A reason I am sensitive to issues such as these is that I believe that in todays world there is a huge amount of effort expended to track individuals and the relationships between individuals. In my opinion these efforts either starts out unhealthy or rapidly becomes that way. The damage that can come out of such databases is, to me, a much greater threat than 'terrorism' most of which is, I believe, pretty phony.