Which platform specifically and are you referring to the custom configurations in the Config Generator section of the dashboard? The way this loophole was closed down is through profile signing. IE, you should not be able to overwrite an installed, signed profile unless you can also sign the replacement profile (which you shouldn't be able to). Curious if you can provide reproduction steps.

Either way, we are dropping downloadable profiles completely soon with the launch of our MDM.