1. Yes, settings those options in the user.js file is also problematic.
2. The options for managing the headers are a workaround for the existing functionality in Firefox. There isn't a way to toggle those settings using the APIs available. If a user changes those options in their preferences, it may prevent Chameleon from setting the header values properly. Firefox modifies the headers before Chameleon can.