Immutable distros can usually be set to mutable with the correct privileged command.

It’s essentially security by obscurity. But I disagree with “no benefit”. An infection miss through dumb luck is still a miss, after all.

If malware has root access it can do whatever it wants

Things like SElinux and sandboxing is what secures systems.