If not done so already, please could all users set up 2FA on your accounts at the soonest opportunity https://docs.gitlab.com/ee/user/profile/account/two_factor_authentication.html

Merge requests are a place to propose changes you've made to a project and discuss those changes with others

Interested parties can even contribute by pushing commits if they want to.