The signals would not necessarily be red. They could display other indications. See answer 1 to your original question. On former Santa Fe ABS, if you are, say, running on the Main Track and intend to leave the Main Track and enter a siding, you might stop at the siding switch and be looking at a signal displaying a green aspect. When the Brakeman reverses the switch, the signal displays Flashing Red (Restricting), for movement into the siding. This is useful when one train is occupying the Main Track between the siding signals and the crew lines the switch for an opposing train to take siding. That eliminates the extra delay which would result if the opposing train had to stop at a red (Stop and Proceed) signal and then proceed at Restricted Speed into the siding. The point is that, the controller box causes the outer opposing signals to display some indication that will prevent another train from approaching the switch at greater than Restricted Speed. Other rules protect trains that have passed an outer opposing signal and have been delayed before coming into view of the switch. It all works together.
If there is a train occupying the Main Track within that block, the timer runs longer than if the block is unoccupied.
There are no rules for where derails are to be located. That is covered by the individual railroad's Engineering Standards, and varies somewhat. Basically, derails are supposed to derail equipment away from the Main Track before the equipment gets near enough to foul the Main Track (i.e., close enough to be struck, "cornered" scraped, raked, etc.). Some derails known as Pipe Connected Derails, are connected to the switch stand by rods and cranks, so that, when the switch is reversed, the derail is automatically removed, and , when the switch is lined for its normal position, the derail is applied. This is out of favor because of maintenance and safety considerations, but some still exist. Many Conductors have thrown their caps on the ground and jumped up and down on them, cursing a blue streak, due to incidents involving Pipe Connected Derails and inexperienced or distracted Brakeman.
Sometimes derails have controller boxes so that the Main Track signals cannot indicate Proceed unless the derail is lined and locked in the derailing position on the auxiliary track. Most don't but some do. It would take a long answer to explain why, but it all makes sense. In CTC where the Main Track authorized speed is greater than 20 MPH, if a train or engine is going to clear the Main Track, there must either be a governing signal which governs movement to the Main Track, or a time lock.
As I said, it's complex but not complicated. When you step back and view the track for a couple of miles in each direction from the location of the switch, it all fits together logically.
One thing I did not mention: There are two styles of time locks. The older style, which you pictured, is mounted on a tie and the timer begins to run when the switch lock is removed. This type has an Achilles' Heel in that an employee can "help" the timer by striking it with a large rock or other heavy object, thereby defeating the safety protection provided by the time lock. The other style, used by Southern Pacific for decades and by almost all railroads nowadays, is a box on a short post near the switch. When an employee unlocks the door on the box and opens it (some also require pushing a button), the timer starts and outer opposing signals display Stop. After the timer has run, the employee can operate a crank lever 180 degrees and can then operate the switch. This style of time lock is less vulnerable to tampering.