Disabling SSO and allowing sign up to forum for anyone

That’s right. Another middle ground might be to get wordpress to behave like a social login.

You can make discourse public in the sense that login is not required to see discourse, But logins will still go through WordPress.