Hmm, the pin_reg spread sheet gives the state of the pins at and after reset. As I read it, it does not explicitly say that only GPIO16 has WPD, but just that this is the only pin which has WPD enabled by default...
There are all of the pull-ups/downs
Thanks for answering all my questions.