With SharePoint Collector, how are file permissions on the content set? Are they all set based on the account running SharePoint Collector? Are they set in the file or as part of the metadata?

The user permission are based on the credentials of the user provided in the site list file. If using federated login, then it is the credential entered on the 3rd authentication interface.