You can stop that with your htaccess.
Here's something else to keep in mind. The folder name and domain name don't have to be the same. I could have named the folder any name I wanted, I just kept them the same for the sake of simplicity. So nobody has to know it's an addon domain unless you tell them.