You can. Look at the organizations features. For basic use I think it’s only like one other person, paid opens this up more if you need it.

Yes, requiring authentication regularly is the default. If you use biometric (fingerprint, etc) this is considerably less burdensome. you can adjust all this in the settings though and use whatever fits you best.