Marketplace OAuth App submission process

I am currently developing an app that allows users to log in using their Atlassian account. This will enable my app to access Jira and Confluence APIs on behalf of the users. I understand that I can achieve this just by creating an app on the Atlassian Marketplace and make it private. However, I am concerned about the potential warning message indicating that the app hasn’t been approved by Atlassian or some similar message would show up.

To avoid this warning message, should I follow the entire review checklist, including having a privacy policy, terms of use, and other information as mentioned in the review checklist? Or is there an alternate review process for a simple OAuth app like mine?

Also, I was going through the App creation and submission forms and I have got few questions.

  1. Are multiple callback URLs supported?
  2. Can we change contact details after the app listing is made public?
  3. Is customer terms and terms of service URL same?
  4. Is privacy policy URL and Data Security & Privacy Statement URL same?

Your guidance on this matter would be greatly appreciated.