No, sorry. That is a design decision.
Yes. No access rules are implemented except the global login. The spirit of this application is to share knowledge within a group of people.
Not at the moment.
[Her the collision probability] [Here a version with SH256 for paranoids]