I the "read only" bits refer to them dropping the update into a new place, rather than overwrite existing files. This makes rollbacks fairly simple, as the old version is still sitting there.