You’re both right.
Congress does have ultimate authority over the way elections for Congress are conducted.
Congress has NO authority over the manner that State Legislatures appoint their Electors, INCLUDING the manner in which voting by private individuals is employed, if a State Legislature chooses to do so.
We’re about to find out if SCOTUS can do anything other than read Congressional legislation