I do not tend to respond to trolling, however I do _not_ consider these questions to be trolling. Your requests for information might seem a bit hostile though and thrown onto the trolling pile. Like you pointed out these are completely legitimate questions that should be answered. However we do not have the answers to these questions at this time.
Preferably we will have a way to ensure that anyone can verify that the generated UFO's are in fact the ones that are deployed, and at the same time deliver proof of destruction of the initial parameters. Worst case scenario, the users might actually have to trust the dev team to do this right. If it comes down to trusting the team, it will probably hurt the price quite a bit, but the technology itself will in no way be impacted.
This is quite different from what has been repeteadly announced by Gnosis. The "trustless" Zerocoin setup had never been questioned, until now. To come now and say that "maybe" the community will have to trust the dev team in order to make it right is definitely a change in the official position, and one that puts ANC at risk.
The setup itself will be trustless once implemented. I do not have enough insight to contradict Gnosis's announcement, but I haven't heard of any way to provide good proof of destruction at this time. You should not weight my word heaver than his though as he might know how to do it. I'm just saying there is a chance that trusting the team for at least some part of the implementation might become necessary.