The beauty of electrum master public key is that it can be used to generate unlimited number of "receive only" bitcoin addresses. Server script could do it for each sale. If someone hacks into server - he can't steal anything, because Electrum's master private key (to send money) never stored in server.