Because the redeeming condition requires the pubKey and the sig, does it mean anyone with the pubKey and sig can redeem the bitcoin?
Yes. Anyone who can provide the public key and a valid signature can spend that output. However there is no one signature; the signature is specific to the spending transaction. So in order to create a valid signature, you also need to have the private key for the public key.