Scripting and SAP authorizations: We are worried about the possibility of SAP hacking, ie that SAP user authorization could be circumvented via GuiXT scripts.

This is excluded by the way in which GuiXT functions. It is not possible to do anything with GuiXT scripts or InputScripts which the user is not allowed to do. You can only change the screen layout and automatically carry out user actions which the user could also do manually.