Earlier quoted context omitted.
I am sure staking pools will be available to people with less than 32 ETH
They already are. The Merge refers to the fact that the PoS chain has been running parallel to the main chain for one year now. It has been thoroughly tested live and so now will be merged back into the main chain like a branch of a git repo.
Yes, definitely, and I'm sure all malicious actors made sure to disclose their exploits before it goes live, right? :)