Yes!
By default, everyone can click on the write review button and submit their review.
But if you would like to limit this to only known customers, just turn off the "write review" button to the public on your customize page and make sure your Call To Review emails are enabled on your configure page. This way no one can leave a review unless they ordered from you and were sent the email requesting a review.