If a SharePoint workflow updates the list item, than it fails if users only have add/read perms.
The Flow runs under a different account which can update the list. So if a Flow could run a workflow on an item it could allow controlled edits from users with no direct edit perms.