I am not even certain what you are asking to be fixed:
1) The time out: annonymous post
2) The sucurity of the forum (CSS commands can be posted if HTML is allowed)
3) The layout (search, start and config button and missing status images)
1 - If a person times out on a site, what am I suppose to do? The core will redirect them to login, they login, where they get directed depends on several factors.
2 - All posts go through the core security filter (as they should), if there is a problem with CSS commands being accepted this needs to be taken up at the core level.
3 - There are no missing images in the released themes for the module. You can only be missing images in the forum if you are using an older theme or a custom one. I am not sure what you are referring to as the "Search, Start, Config" buttons. As for layout, major issues have been corrected (extra td, missing /tr, etc.) for the next release. However, I have stated numerous times that a major UI rewrite is required and that won't happen until post the 4.4.5 release.