Check also LND accounts
https://docs.lightning.engineering/lightning-network-tools/lightning-terminal/accounts

Yes, use LNBits
Here are some guides where I explained that scenario:

Done, your users can only receive, not send.

bitcoin

Is there a way to create a wallet that is watch only but lightning?

Yes, use LNBits
Here are some guides where I explained that scenario:
- https://darthcoin.substack.com/p/the-bank-of-lnbits
- https://darthcoin.substack.com/p/lnbits-for-small-merchants

TLDR: 
- create some lndhub accounts with your LNbits instance.
- open Zeus or Bluewallet and scan the lndhub QR for invoince only.

Done, your users can only receive, not send.

Same works with BTCpay LN bank plugin.