I don't think a developer will want to do read-only. If they don't have commit access to our repo, they should fork and clone their fork.

If they clone a repo RO, they can't push branches, and thus no pull requests.