Yes, people keep pointing to CT as that prevents bad actors. It doesn't do that at all. At best it helps expose them after the fact.

Not anymore, because the CT logs only accept entries for currently active certificates. But during the period before it was revoked, yes.

Yes.