I have all osC stock versions going back to 2003. None of them enables the apache rewrite engine nor has any rewrite rules. They just don't have it. So we are talking about some addons. You can always see for yourself.
The issue with category or product you mentioned - that is part of the url, I am guessing you refer to something like:
product-p123.html
that is translated with many SEO contributions isn't it? And the old false impression many have, that it creates a duplicate content because the same page is also loaded if you enter:
my-product-p123.html
my-other-product-p123.html
..etc
Is that right? If so there is no duplicate.
In order to have a duplicate, the URL must be generated by the core code itself and be exposed in the page you view. And that is not the case here. What you're saying, is the same argument, as I can go to any site pretty much and just append a couple of parameters to the URL and then claim it's a duplicate, because the request returned 200. No that is not a duplicate. Just try it on this forum or anywhere you want.
This thread
[
webmasterworld.com...]
it's not a duplicate because there is no code that generates it in the application. Well ok it maybe now, after the post if the forum picks it up as a URL.
Now URL poisoning is a different matter. That is serious and none of the discussions I have seen, talk about it. That has to do with the core code where some of these applications don't properly filter parameters, but that's different subject is not .htaccess or seo url related.