1 - If they are not a user on your account then no.
2 - you would have to obtain the token via the api, however this can only be token with users that belong to your account.
3 - No, because the invite is just text/email, the meeting ID can be shared anywhere