1) The devs harvest with their coins and thus add to chain security.
2) First nem core will be released and then the rest. But there is not yet a definite time scale.
Is it possible to get source code related to PoI? Without other parts it can't be used to clone NEM so there shouldn't be issues, right?
Perhaps it maybe faster for you to decompile it. I am sure you are just as good as those hackers who could/may/can decompile to hack the system.