In the days before we had weekly OS updates, it was fairly standard practice for unix admins to mount everything except /var, /home and /tmp as readonly.
You had to switch to single user mode if you wanted to remount them as read-write and update the OS.
Does immutable also mean you can't turn off or remove all the annoying shit they bundle with operating systems these days?