Answer to question 1: Yes, there is a permission <uses-permission android:name="android.permission.INJECT_EVENTS" />
<uses-permission android:name="android.permission.INJECT_EVENTS" />