Hi Tvnl,
3.03 to 3.04 were a few GET changes. 3.04 was a 'fast release' for fix. Brooky should be swamped in arrays right now as he's working on 3.5.
Not quite sure what you mean as the 'code is a mess'. Considering this format will be the future mainstream; as it stands now, there aren't too many carts out there willing to take it on without absorbing the knowledge of pioneer CSS/XML cart developers and carters. CC is still one of the top ones out there in this format.
I agree with you, CC3 has a bunch of features. Happiness for us

I think though as capable as Brooky is in adding more features (requested), I don't see him as compromising security for the sake of ease.