Creating a view does not achieve item-level security.
View simply filters the data for the user.
The user can still access (what they can't see) by creating another view or using REST queries.
So the answer to your first question is No
If you want to restrict their access to the data you need to go with item level permissions