Mark copy constructor and assignment of ModelTree as protected

This limits the risk of slicing.

The same is not possible for DataTree, since that base class is directly used
in some places.