Hi @Charlie Lancaster,
Per my research, we are able to create Remote Event Receivers using CSOM currently. But considering future updates, I would recommend you to transform SharePoint Add-in model Remote Event Receivers to SharePoint Online Webhooks. Please refer to the following document
For your second question, remote event receiver registered via an Azure AD app will be unable to trigger the endpoint because the Azure AD app doesn’t have any local identity at the SharePoint level.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.