Q1: Should the daemon be run as root for better security?
I wouldn’t. I recommend running it as your user or as a special “ipfs” user.
Q2: Is there any reason a private network IPFS installation requires root?
It doesn’t.
Q3: Is there any reason an ipfs-cluster installation requires root?
It shouldn’t.
webui
Answered in Webui not working in private network configuration