CiviContributions > New Contribution Page with an ANONYMOUS USER and no Login Display in Drupal (CiviCRM 5.25.0 / Drupal 7.70)
I think 1 will take care of #2
Profile listings and forms are NOT for your public users. Only trusted users. You want to change that one
Here are the permission you need for Anonymous and Authenticed Users
CiviCRM: profile create
CiviCRM: profile edit
CiviCRM: profile view
CiviContribute: make online contributions