I have just checked the code and tested the restore as teacher - I can restore to other courses only when logged in as admin.
Anyway we should not discuss security problems here, please contact me via email
If you want to report any security related problem, please use security.moodle.org.
skodak