I built a similar service some time ago, and made some similar verifications and tests, I can provide some answers as follows:
- Any request for 'Your Domain" will count as a page view, see docs
- You can test the service from runscope (or similar), to get real request times. For example, I have a similar service that performs a SOQL & DML to a single contact record (on a dev org), the round trip averages at 630ms.
- Yes, this is still an API call and so the limit will apply. You will need to asses the likely hood of hitting this limit based on your knowledge of the service, frequency of calls to it and the average response time tests from runscope. If your service responds instantly there is much less chance of hitting this limit than if your service completes some complex apex perhaps including SOQL and DML before responding seconds later. (see dev blog article)
- Yes, each call to this public site RestResource will consume 1 API request. I have tested this.
- The docs here clearly state the 3mb request/response limit does apply, although this does not explain your tests. However perhaps an exception is made around attachments as these clearly do transport successfully via API (e.g. with force.com dataloader over soap or dataloader.io over soap & rest and many other integration tools).