COSU Configuration and Enrollment using the QR code enrollment method

Hi, we are really excited about using this to control some of our in-store single-use tablets.

I've been testing it on a few devices and it's brilliant how quickly it works (especially compared to the legacy Android method in Intune)

I've got a few n00b questions that hopefully you can clarify

1. Is there any requirement to push the Intune Company Portal app? I don't believe so as we have it working without it but in your screenshot you have it there.
2. Enforcing device PIN - this doesn't seem to work, it would be great to have a video seeing how this happens
3. Web links - We deployed the Microsoft Edge Browser to allow web apps to open, however it nags the end user to sign in with a work account and has unecessary UI (we don't want them to add new tabs or browse other sites). Are you able to control/hide this, perhaps with an Intune App Configuration Policy?
4. On our test devices, when using the multi-app kiosk mode, it doesn't have a "home" or "app-switch" button. The only button they get is the "back" one. This makes it very troublesome to get back to the home screen or move between apps. Is that the as-designed behaviour or have I set something wrong?
5. Is the"Kiosk mode" flexible? I can't find any documentation specifically about what restrictions get enforced or if they can be customised (change wallpaper, allow status bar etc)
6. I'm a bit confused on what you say about exiting the Kiosk mode. I take it their is no secret process, e.g. tap somewhere 3 times to enter an "admin unlock" code. If the store manager needed to get to the settings screen to modify something (especially during our early testing phases) is that possible. You say "all you need to do is remove the Managed Home Screen app deployment" but we didn't deploy the app, we just sync'd it and used the kiosk profile to utilise it. Same question if you are only in "single app" mode.