yes.
yes.
depends on your needs. for the most part using encrypted dmg (128-bit AES) files work for most people. there a lot of threads on encrypted dmg and filevault. if you do a search on filevault you can read about all the pitfalls people run into.