Replay protection conditions/solutions

Is this summary correct?

Yes. If you want to confirm it, then you can use regtest for that. By connecting two nodes on localhost, you can check, how the network could behave, and what exactly each node would see in a given circumstances.