I don't think Paul had a handler, either. They're just there to get the dolls who don't know they're dolls to their treatments. Paul knew he was a doll. And he didn't need a treatment, 'cause he was going to stay on the 'Paul Ballard'-imprint anyway.

"would you like a treatment" stuff didn't work with any random stranger

Indeed. Plus, the other Dollhouse (in season 2) uses different phrases (like for senator Perrin).

I guess it depends on what the higher ups ordered the programmer to do. I could just see those in charge leaving their former actives vulnerable on purpose.

I agree completely. All depends on the programming.