I upgraded only a moment ago.
I don’t know about either of the 2 OP issues, as I have not disabled Badges.
But I can confirm the third Bug in this topic.
The First Emoji does leak non-public links that if clicked give a “need permission” page if not logged in as a member that has permission.
- IIRC DefaultGal1’s was granted for a post subsequently deleted.
- BasicGal1’s for a post in the private GoodGuy groups category
- ModGuty1’s for a post in the TL3 Lounge category