Can internal users add a user to an existing assessment even if they started by selecting it and starting themselves?

Yes. Internal users can invite a vendor assessor at any point during the security assessment process, even if they initially selected and opened the assessment themselves.