It can't be read only because you need infrastructure and editors that review and approve every single change by hand. Even a single accidental violation could get the mirror shut down.