It's not that shady. I imagine he gets to see what's ordered if only for his own confirmation that the amount they give him is correct.

Also, just do what ToriJ said. And set the delivery address to BoB's work.