I'm interested in why COS is unaffected - is it due to the read-only root filesystem?