No card needed. You can add a subscription whenever you want one.
At least 12 characters. Longer beats complicated.
You will set up two-factor authentication next. It is required, and it is what keeps your devices and billing yours.
Your sources and viewing history stay on your own devices.