This is correct, but that page just outlines the 2 ways you can get tax residency.
Upon gaining tax residency, what I said would apply. If you prefer to stick to the law, you would be paying 12.5% corporate tax (or 2.5% with IP box). You could get paid up to 19500 EUR as a salary with 0% tax. The next bracket has a tax rate of 20%. IIRC, you will always be paying only 2.65% GESY on dividends. If you become a domiciled resident (tax resident for 17 out of the last 20 years), you will also be paying a 17% SDC rate on dividends and︀ interest.
No, just not enforced.︁ CFC and PE laws were introduced/novelised in 2019, but zero enforcement of them has taken︂ place yet, to the best of my knowledge.
A lot of foreigners. Which is why they're unlikely to do so. The state is︅ already pretty happy with its 2.65% contribution on dividends from onshore and offshore income, and︆ the people don't complain - hardly anybody has a problem with paying that.
Yes, Cyprus could theoretically do a "rug pull", find offshore︋ companies ran by Cypriot tax residents and request them to be taxed. But Cyprus is︌ generally pretty lax. In fact, even a Cypriot company can lose its tax residency if︍ it proves that it has got PE/CFC somewhere else and will pay tax there (which︎ should still work even in a zero tax country that can issue certificates) - one️ would gain the added trust of an EU company while running it offshore.