Well, the Remote Data Source definition includes a database user and pass.
That is static, so no matter who's querying any virtual tables on top of that DSN, it will be executed against the remote DB with the DB user defined there.
I'll leave question 5 & 6 for other more experienced peeps.