1 & 2 – that is correct.
3 – that is INCORRECT. It works just fine in a .NET program even in protected mode.
4 – That is correct.
5 & 6 – correct, though subtle (I had to read what you wrote twice to figure out how you were differentiating).
7 – Correct.
8 – Depends on what the JavaScript does.