Yes, you found it. Does that explanation make sense? In nip42 auth mode and this setting on, non-members cannot make REQs (read) but they can still send tagged events to members (such as giftwrap, dm, or even a comment).

these settings will expand with more mode options, as we narrow down the popular ways to use the combination of read/write/auth controls.