4
Yes, that's correct.
Alternatively, the phpMyAdmin manual explains how to set up "cookie authentication", so that you have to log into phpMyAdmin with a MySQL username and password. Your access privileges within phpMyAdmin then correspond to the grants for that MySQL user.
That type of authentication requires editing the phpMyAdmin config.inc.php file, and also (I think) adding a special "control" MySQL user.