1. Yes
2. Yes
3. Regardless of Tor usage or not, you decide if others can connect to your node. Tor is not a firewall.
4. Yes
5. "best" is subjective and not really a suitable question for StackExchange. You can use either a Trezor or Ledger.