It might as well be! Code and configuration don’t have a practical difference in their potential impact on running systems; both are equally capable of causing security breaches or outages.
Yes. ini files are simple programming languages. The application that processes it is acting as the interpreter, its behavior changes based on what's described in the ini file.
