This way the root subvolume can be left read-only easily, and variable and user data writable with explicit quota set.