If it can't read the USB stick you can't scan to it, it automatically will switch to whatever is the default for scanning and drop Scan To USB down to the bottom of the list.
If your users are scanning secure documents and are not paying attention, then I would suggest making the default mailbox use a password and just don't tell anyone what it is, then have the machine delete anything in that mailbox daily or hourly.
