Make it like Teams, where only select members add/approve new project members.
Comment Only users cannot add users, which is great. Constantly there are situations where you want a user to be able to add/edit/delete tasks BUT not add project members without approval of the project owner(s) - i.e. you don’t want them to have the power to make everything public to anybody.