1. Bare-metal 2. I only worked with the MT3620 so I cannot comment on others 3. Pluton would boot the A7’s Secure World which would the boot A7 normal world. Secure World and Pluton interfaced regularly but they’re fundamentally different code and purposes.

Hope that helps!