Xenappweb 2021 -

Yes, but only with legacy Citrix Receiver 4.9 or older (not recommended).

Isolate it in a legacy VLAN, force HTTPS, disable TLS 1.0/1.1, and restrict IP access. xenappweb

Poorly. It was designed for desktop browsers with ActiveX/Java. Use Workspace app instead. Yes, but only with legacy Citrix Receiver 4