Re your first question, see https://github.com/ipfs/notes/issues/40

In terms of revoking access rights, that's not really a problem unique to IPFS (cf. DRM)