Can one execute dynamic SQL from Forms?

Yes, use the FORMS_DDL built-in or call the DBMS_SQL database package from Forms. Eg:

        FORMS_DDL('INSERT INTO X VALUES (' || col_list || ')');

Just note that FORMS_DDL will force an implicit COMMIT and may de-synchronize the Oracle Forms COMMIT mechanism.