I would expect it to comment, not alter the code?

It won’t unless you ask it to. It will review your PRs and it will create PRs if you don’t turn those things off, I believe, but it won’t edit or modify any PR.

My employer pushes copilot quite hard and I’ve never seen copilot do anything without me telling it to act in some way.