1/ You're right. I retried an install today and confirm its explained that an empty root password means that the first user will be in the sudoers. That's fine.
2/ Yes, it would great to be able to redo this part of the install and set the root password again. So this bug entry is still valid for this part.
