Yes, anybody can add or edit data if you allow it.
If users are not signed in, any data that a users will not be linked to a specific user, but you could add something to your form to include a name or somethingike that.
I assume you mean users that are signed in. @Robert_Petitto has several videos regarding following/unollowing, and chat.