Correct. As noted by Joerg, one could tell from the unused tokens who voted and who didn't, There's no way to tell who voted for what though, unless they make their post-vote token public. Also, as elections end and their results are stored, election tokens tend to get wiped out, since they're no longer useful and take up space. So after that, it's not even possible to tell who did or didn't vote.

Incorrect. The voting page most certainly does confirm your vote, twice. If you hit next without selecting anything it states "You have opted to not vote for any of the candidates." This is a valid option for those that want to vote but dislike all potential candidates. That page indicates you must approve the action in the same way you would a normal vote; by hitting the "Next" button again to cast the vote and get your unique verify value.

If you didn't get a confirmation string (~20 characters) your vote didn't cast, and your vote token is still valid. At any time before you get that 20 character string, you can re-start. It's setup that way in case your browser or network has an issue and disconnects you mid-vote.

The creation of your vote and destruction of your voting token is an atomic action. Meaning if anything goes wrong, your vote token is still valid and can be used to vote later, once the problem has been resolved.