Yes you have to restrict access to the form itself on Form Sharing. Make sure it's not available system wide and only share the access on the restricted form to those that can see it. Don't include the agencies. Our agencies each have their own detailed form and they can only see those forms so that...

We place the internal review files into a folder called Internal Review and then restrict the access to that folder to just the internal design team.  Then we upload a clean file into the Stakeholder Review folder.  That file can be shared out with anyone for proofing feedback. 

I do this.  We have 2 separate custom forms.  We just don't share access to the confidential form with that agencies group.  We keep our agencies in separate user groups and restrict them down that way. 

Yes and yes. 

The project reference number.  The user completing the survey provides the Workfront Reference number in the survey. 

Some definitely do log in. I did test for a user now and if they don't log in it looks like it still works. I'm going to propose this out to some smaller teams to test more.  Thanks. 

I can not share the survey. The trigger is every day at 5pm EST a search for projects completed with these send survey field Yes on them will post the update.  Then will change to completed and post the date of the survey being sent.    

You can see and export this information in the Set Up-> system-> Audit Logs  

We use Fusion to post an update on the project with a message and a link to MS Forms. 

I'm going to test this but we are SSO so anytime anyone logs in again it reverts back to their Active Directory First name and Last name.