For direct notification, I have an idea which is out of the scope of this feature. I will write another blueprint.
Yes he can because he has the right. If for some reason company has a work-flow that prevent such behaviour, it should be added by customizing the workflow method or create a new workflow state. But I do not think it is a common use case because if we want multiple validation it is because we want to allow to cancel the validation.