@scott.sr if z-wave gets totally unresponsive or flaky, shut down the hub and unplug for 30 seconds then plug back in so the radios can restart. Do this before attempting anything else if you encounter issues pairing or excluding.
In the screenshot posted I can see they are on ZIP already. Route Changes would show as N/A for ZWJS. @scott.sr so no action needed here for you. ZWJS is a newer gateway added in 2.4.1 you can optionally switch over to, stay on ZIP for now.
Yes, all locks will fail to pair without security.
Older S0 devices the hub wont ask, it has to use security per specs. Newer S2 devices the hub will ask. I think it says right on the inclusion page when the option comes up that locks require security.
You can also just add again using SmartStart if you want. It will default to LR mode but you can change it to Mesh before you power on the device.
