Everyone sees everything — data leak risk
Granular per-module permissions + role templates — built into the core, no plugins required.
Yes — crmoffice is a single product with no feature gates.
Yes — turn off the module via Settings or simply ignore the menu item.