They can still send you to a debt collector if you don't "properly" cancel by sending them a smoke signal at 3:42pm on a sunny day with easterly winds.
They did it to me, luckily I was able to get it removed.
Not if you never give them any real information about you. At least one virtual card operator lets you use whatever name and address you want per card.