No (Installing freeshop, like any unsigned cia, requires a CFW running)
No (you don't "install" cfw, you copy it to SD and directly run it; it can't run without arm9 access)
No (arm9 access is required for direct nand writing)
Ninjhax2 is an userland exploit