Yes, apparently.

Yes if it's compiled as a standalone script or script bundle and then run using osascript.

You can also compile osa scripts into .app bundles, since these are new, standalone apps they need to have a valid signature.