The two different exploits that were used to change the permissions of the objects in question have since been closed - one a couple of weeks ago, the other earlier in the year. LL knew of these exploits for quite some time before closing them. One of the exploits did not even require modifications to the client - you could do it through the menu of any viewer, including the official one. The functionality was built right in.

No, it's not just the copybot viewers that are an issue, LL has concerns about the OTR feature in Emerald (potential legal implications for LL), so in its current state, Emerald would be unlikely to receive the seal of approval here.