3
You are on the right track - and call it what it is - a take over of XOOPS. There is nothing wrong with that on the surface. In other words, it's going to get forked anyway. It's bound to happen. There are too many who want XOOPS and continue to hang on to the various dramas that occur on a regular basis.
One suggestion - I do security for a living - don't put all your eggs in one Protector module basket. Protector is good, but not the final solution. Take a look at projects like mod_security for apache. That is a much better model for protection, and is easily implemented.
Looks great!