Regarding #3, it is expected behaviour. We cannot SSO to desktop if Horizon Workspace doesn't have the user password. This is something we are looking at a few options to see what to do.
#1 and #2 are valid enhancement requests and we will track them. Thanks for your feedback