OOB publications are viewable by all internal users with snc_internal. In addition the sn_publications.author role has create and write access. For your first question, has some logic been added to restrict visibility of publications?

For your second question, a predefined header and footer can be applied using the email template option