For both problems open bug reports (two bug reports, because they are different and independent).
Read-only subvolumes is not new, but so far it was “fixed” by adding exceptions for the specific filesystems and snapshot locations. This whack a mole does not scale obviously. Some more generic solution is needed.