I had a test scenario where
User Betty didn’t have permissions to a destination library (only I had permissions to it) Via the Content Organizer rule and the Drop Off library, Betty could send a document to a library where she didn’t have access. Anyone addressing this issue and how? We just don't want people to be able to send things to a destination where they don't have access, but looks like the Content Organizer Rules impersonate some part of the move.
What's odd is you can see the "CreatedBy" as Betty, but she can't go to the library and even see the moved document...permission is denied.
Looks like this is a known issue on 2010 (as shown via 2 links below), but hoping we can address in 2013 and somehow disallow users from sending things to destinations where they don't have access: