Amutable. Building an immutable and image based system which even the installer can't modify, a-la macOS.

One systemd patch at a time.

This is actually already required to be supported by complying to the FHS.