None of the other "allow" methods need to consult `readOnly()`?