By default, anybody can write a review, how to only allow the customer who has placed an order and has logged in to write a review?
Enable Advanced Customer Reviews and click configure, besides “Who must be allowed to add reviews”, choose “Customer who bought product”, clicks “Apply Change”, done!
If only let the registered customers write reviews, just choose “Registered customers”.