There is seemingly a trick for creating read-only sshfs logins with the read only attribute is enforced by the remote's ~/.ssh/authorized_keys file. You first create a program ~/.ssh/ro-sftp-server ...
I currently set up sshfs automount on ubuntu per this thread. It's nice because of the network up and down scripts. The benefit comes at a cost: it requires passwordless ssh via an ssh key. I was ...