Witnesses are basically miners. Ned computed the number of nodes needed to make sure that the data stayed solid, and that is how many witnesses are paid.

You can write a wallet if you want to. There is all kinds of libraries for accessing the graphene block chain. However, it would be almost exactly like the wallet page on steemit.com. No more and no less secure.

Your master key is the only security in the entire system.