Changing bitcoin core password
Will someone who has 1 of my old .dat files and who knows the old password be able to access my bitcoins?

Yes. Including bitcoins added anytime afterwards!
As far as I know, the password is used to encrypt the file contents (or at least the private-keys in it). So old passwords are still valid for decrypting old files that were encrypted before you changed passwords.