'view own orders' permission should be checked against $account not the global $user in uc_order_query_uc_order_access_alter()

You're welcome. We still need to implement the query on entity access like nodes does but I don't think this is a priority because orders are not so publicly accessible.