will Lucee will come up with same changes what Coldfusion latest Update has done, issues with with scopes, if that happens, My lucee is all broken then

Lucee is not Adobe; Lucee is open-source, and adobe is not. Issues with Adobe rarely, if ever, translate to problems with Lucee. Most updates for security purposes usually involve underlying libraries that are common in the Java world.

I can't speak for the Lucee team, and I have no idea how their implementation of what they call "Scope Cascading" is built like internally, but if it is in any way done the way implicit scopes were done in ACF, then it means there might be a potential for a security vulnerability. I believe you can turn scope cascading off in Lucee, which could allow you to test how much refactoring will be involved in getting your code fixed. You can set that in your application.cfc as documented here: https://docs.lucee.org/reference/tags/application.html#attribute-scopecascading

The big difference is scope cascading in Lucee can not be done with built-in scopes. This can be overridden.