The most significant change for VMware administrators is the shift in download location. for vSphere downloads. This is now the primary source for all official VMware patches, including those for ESXi 7.0.

No. You must have a free MyVMware account. There are no anonymous FTP mirrors for legitimate patches.

Review the ESXi 7.0 Update 3v Release Notes for specific bug fixes and CVE remediations.