Yes, this is the case with all modules that implement a suspend and cancel option, and I assume this one does as well. (You need to install the Auto Cancel plugin to cancel suspended services automatically though https://docs.blesta.com/display/user/Auto+Cancel)
Probably not, at least not without removing it from everyone by modifying the module. We are planning to allow certain management options that modules implement be permissions based on the Package level in the future though.