OK peeps – I found answers to both questions, one is that Workgroup Manager sets the protocol for shares, if you uncheck ‘share this item with FTP’ under Sharing > Protocols > FTP settings for each share the symlinks go away in the FTPRoot.
The second was actually in the pure-ftpd man page, -e is the option to force anonymous connections.
Whew!