To Do list for Users that can't create tasks

I am desperately trying to deliver on an ask to provide our “worker” level users with access to the To Do list on their home page. Issue is this requires them to have the ability to create tasks. Our users need to be able to fill out custom forms on PM’s projects so they need Edit access to projects but at some point the Project Sharing started allowing users with Project Edit access the ability to be given Manage access to Projects. If they are mistakenly given manage access on someone else’s projects they now would have the ability to add tasks in their timelines. 

I would love if we could find a way to let them use that feature but not allow the accidental oversharing.