The upload code in the plugin is pretty archaic and hopefully WordPress's upload/sideload functionality has been improved. It'd be best to replace any logic that was lifted from WordPress with calls to WordPress functions again.
Back-compat be damned. Future versions of the plugin should not support anything older than Latest-WordPress-Release minus 1.