Why would a developer consider using a custom controller over a controller extension?

Given the following block code: try{ List <Accounts> retrievedRecords = [SELECT Id FROM Account WHERE Website = null]; }catch(Exception e){ //manage exception logic } What should a developer do to ensure the code execution is disrupted if the retrievedRecordslist remains empty after the SOQL query?

A developer has JavaScript code that needs to be called by controller functions in multiple Aura components by extending a new abstract component.
Which resource in the abstract Aura component bundle allows the developer to achieve this?

When a Task is created for a Contact, how can a developer prevent the task from being included on the Activity Timeline of the Contact's Account record?

Given the following code snippet, that is part of a custom controller for a Visualforce page:

In which two ways can the try/catch be enclosed to enforce object and field-level permissions and prevent the DML statement from being executed if the current logged-in user does not have the appropriate level of access? Choose 2 answers