One thing I don't get is how do I stop members who did not pay to click "Attend course" - AND to see/access the classes

It shouldn't work like this, I've already asked @Anton L to have a look.