Overall having comments in a not-github way has a noticeable increase in difficulty for the general-coding public.

It's worth trying to do things more openly/in-github when possible (IMO). Github is quite opinionated though and does take time to adapt workflow to the github-way.

There are a bunch of branch protection rules that can be combined depending on how much you want to block merging before the review is "finished".