I've read the whole thread and more.  It seems there's still no way to give an auditor remote access that is read-only, even with Advanced QB Online.  The only option I can figure out is to give an auditor full access as a user or as an accountant, trust him/her, but verify periodically that the auditor has not changed data by reviewing all their activity.  

Does that sound right or am I missing something?