This isn't exactly a how-do-i, but what exactly does setting people to Read-only on Graphite do_?_ If there's an explanation beyond what the name implies, I haven't found it.

(If applicable) To help us more clearly understand what you're trying to do, please provide additional details about: - Screenshots / debug logs / list of commands you've tried to run so far - Your workflow - Current state

They can't leave comments on PRs via the Graphite ui then?

I don't believe so, no. They're effectively "view only".