To 1) Yes, IF you know the zone key (which is a public key). You can perform a dictionary attack for common label values. This is discussed in the security cons

To 1) Yes, IF you know the zone key (which is a public key). You can perform a dictionary attack for common label values. This is discussed in the security considerations To 2) This is a governance issue. Theoretically, you could deploy GNS with an ICANN root zone. BUT, the system is designed to give users the freedom to override defaults if necessary (see the root zone section in the draft). GNS clients will likely ship with a default zone configuration. If you operate a zone and are a considered trustworthy third party, nobody can prevent you from taking coin for adding delegations to your zone or offering a platform on which you can trade the labels.