"did not cause any harm" - for a very loose defintion of harm. Sure it could have been much worse. But enough ground and water was contaminated, and much more will be in the future when they run out of storage.
It is still improved. The actually also want to add this kind of check-in (almost done) but it might be blocked by apple/google as the terms of use of the contact tracing API forbids use of additional data.
Neither is right. CCC also has security experts as members, which sometimes comment publicly. In general however, it is the parent organization for local hacker spaces (though it is possible to be member on only local or only CCC level). And many local spaces are also called ccc-xy. Wnd their interests.