Yes and yes. No, the VM is not read-only. (But you can run a VM as read-only.)