But true - what could we do if the official software was in fact changed containing something most people would not approve of. I hope it never comes to that..
The bitcoin.org domain name is thankfully not controlled by the Bitcoin Foundation. It's controlled by Sirius, who was given this control by Satoshi. So if a version of Bitcoin released on bitcoin.org does anything funny, Sirius can take it down. If Sirius does anything funny, the release won't be properly signed, and the Bitcoin developers could also issue a network alert. I think that this is a very nice arrangement. (And it was set up this way by Satoshi, so it must be good!) Though Gavin has said that he would like the domain name to be under the Bitcoin Foundation's control, which is something I definitely wouldn't support.
I don't think that the Bitcoin Foundation does much harm if it doesn't get too much power. It might be useful for it to hold any Bitcoin trademarks and patents
in jurisdictions where it's not safely possible for no one to hold such things. It's good that Gavin is getting paid. I haven't been too impressed by their other activities, though they haven't done much harm IMO.