1) No. EPM240 needs 2.5V or 3.3V (as you've already pointed out). EPM240 won't work if VCCINT is at 1.8V.
To quote the relevant notes from the datasheet:
--- Quote Start ---
Notes:
1. For EPM240 devices, all VCCINT pins must be connected to either 3.3 V or 2.5 V, but not a combination of both.
For EPM240G devices, all VCCINT pins must be connected to 1.8 V.
2. Each set of VCCIO pins (VCCIO1 or VCCIO2) can be connected to 3.3 V, 2.5 V, 1.8 V, or 1.5 V.
--- Quote End ---
1a) If you meant EPM240G then yes. VCCIO & VCCINT could be powered from the same 1.8V rail.
2) No. (But yes, possibly). 2.8V is not a voltage at which Altera operate or characterise any of their devices. 2.8V won't damage an EPM240. However, 2.8V doesn't comply with "all VCCINT pins must be connected to either 3.3 V or 2.5 V".
It'll probably work quite happily. However, you just need to be aware that none of the datasheets cover the performance of a device operated at this voltage, nor will Altera support you should it not work.
If you have 2.8V available then, for the sake of an extra LDO regulator, add the required 1.8V rail and use an EMP240G part.
Cheers,
Alex