Only a third option if you don't care about all the problems the article tells us about. Full access by third party developers and being able to update code are simply at odds with each other. There's no way around it.
Allowing addon developers to access private APIs simply doesn't prevent Mozilla from changing them, or anything else. An unstable API is much better than none at all.
