So can they?
Here is my site Read-Only: LINK (how to share your site Read-Only link)
Yes they can, be sure that you have set the security correct