if I were the one with criminal/unethical intent, too bad. So, I think there will be security issues in any program.
Yes, there isn't much that can be done to set a picture unchangeable. Flattening the comments into the pdf before sending it to AC might give some peace of mind to a user concerned about that kind of thing. But, you're right, any unethical intent and it won't do a thing.
