Q: Can browser apps access tor onion sites? Such sites could not have a valid certificate, right? So I'm guessing they cannot.

So then tor usage is limited to having the client tunnel everything through tor and out through some exit node to a regular website with a valid cert.