I'd be interested in hearing the answer to the capacity question as well,
though I suspect it should be fine. We're planning on hooking up a SAN with a
terrabyte of storage up for starters.
As far as security is concerned, access is managed at the document library
level, no lower.