They have a switch that requests the host doesn't try and write, but it's not read only:
It is the responsibility of the host to protect the card. The position [i.e., setting] of the write protect switch is unknown to the internal circuitry of the card