Post review changes the --read-only option is not enforced for the slave thread in replication, or for the SUPER user.