Thanks for reaching out.
1. There is no way to distinguish at workflow level whether a request is using enable copy access or not. No such variable is exposed.
2. No restrictions can be applied. On clicking 'Copy Access from User', all active users in the system will be displayed by default to select from.
This will be an enhancement request.