Great questions. 1) No 2) Yes. Caddy 0.9 makes it possible to scope the CA to an individual site address. However I have not yet decided to expose this degree of control. (Maybe just a ca property in the tls directive?)
If you can still use the -email and -agree flags to bypass prompts, does that sway your opinion at all?