A: Generally no, but like any file container, hackers could embed malware. Never open HEIC files from unknown email senders.

A: No. Not out of the box. You must install the HEIF Image Extensions from the Microsoft Store.