They do agree on the shares - that is the agreement I tried to clarify in the message above. There is a well understood reduction from reliable broadcast to/from agreement and that is what we are using. Once the MSPs have a consistently replicated database of shares - which is what echo broadcast provides - they will calculate how much each of the MSPs is owed. They will all arrive at the same answer without us building a nakamoto consensus.
I addressed rate limiting in an earlier message above. To repeat, each MSP adjusts difficulty for its miners. MSPs will be dropped from the network if they try to DDoS other MSPs.
The shares that are forwarded by MSPs have verifiable ownership. MSPs that receive shares can associate identity to miners and to MSPs. This is explained here Replicate Share Data Across Syndicate :: Radpool Design.
each MSP is a centralized pool for their downstream miners
Yes! This is by design.
Radpool is a syndicate of mining service providers.
with no effective accounting on them for their users.
No, as the link above describes, each MSP is able to tally up the shares by miners and MSPs. They are able to validate that a share was produced by a given miner for a blocktemplate produced by a given MSP.
No again. Instead of say one centralised pool, we have 20 MSPs collaborating and each is generating templates for their miners.
Going further, remember MSPs are competing to attract miners. If miners want to use sv2 and/or datum, they will work with the MSPs providing sv2/datum, and thus we get even further more decentralisation of template production.