Everything is key based, so only key holders push to your repo. It's all based on the SSB protocol.
I'd suggest reading https://github.com/noffle/git-ssb-intro to get an idea.
I'd suggest reading https://github.com/noffle/git-ssb-intro to get an idea.
I'd be surprised if there was no security for pushes. The repos I've worked on did require an invite from the creator.