What is read-only root filesystem in Container Security?

A read-only root filesystem prevents runtime processes from modifying most files inside the container image.