At the moment only Cubase 8.5 VSTi’s are supported. In this way you can be sure that your cloud projects will be loaded correctly. 3rd party plug-Ins are not supported.
Your friend can’t change your track. Tracks are protected. Only track-owner can change their tracks.