I wonder if there could be security issues which aren't addressed by any number of additional rounds.

For option 2, how would the number of rounds be increased?  How can an algorithm detect the security is at risk?