Re: Is it known that every block CAN produce a hash under target?

There's also the timestamp field in the header, which can also be updated (and doesn't change the merkle root).

True, unless you have better than 4 GH/s, updating the time-stamp allows the nonce to be reset faster than it is used up.