Yes. All permission models from the forum still apply, so they would need to be a member of the forum to comment in the embedded window. The topic would need to be public, of course, to allow the comments to be visible to visitors.
How you restrict membership to your forum (invite only, approval needed, etc) is still entirely up to you.