I am a firm believer that lock box should be worked under dual control, camera (if psooible) and separate area from posting transactions. Am I being overly cautious?

no, dual control is a must for any receivables position that the customer is not present at the time of the transaction. Even though you say don't send cash, you'd be surprised how often it occurs.