Thank you very much for drawing our attention to this workflow issue. We completely agree with you that users who are not granted the proper permissons should not be able to see the buttons when they go to the All Pages
link. We will fix this for the official release.
Also, we think that having the sort of workflow history you suggest will be very useful. We have logged this feature request in our system.