I wonder how a variant of XXTEA (perhaps with more rounds) would fare as a replacement. It's only a little more complicated to implement than RC4, but solves some of the issues. It acts as a wide block cipher which reduces the impact of not having authentication or IVs.