IOTA uses the coordinator as a security measure right now (against 34% attacks) and will be removed once the coin is distributed enough to diminish probability of attacks. So saying it is not decentralized isn't honest. Without the coordinator it is decentralized.
Point two is also refuted once the coordinator is gone.