Re: "can be created and read, but not updated or deleted"
If there is an incident (think air crash) or security incident, then all data referring to that incident has to be put on hold so that forensic investigators can look at it. You have to prove it's been put on hold and nobody (including admins who may have caused the incident in the first place) have played with it.