@stefano Raspberry Pi OS does this too: select 'Overlay Filesystem' in raspi-config, and you're read-only from next boot.

It's handy