Hello,
Just a correction: if someone has physical access to the machine, he won't waste time to boot on a live cd, he will directly boot into single user mode and directly get root credentials.
About your questions 1) and 2): not to my knowledge... but my knowledge are quite limited
Oliv'