fix(security): enforce static readonly fields on the UPDATE write path (#2948)

fix(security): enforce static readonly fields on the UPDATE write path (#2948) #8515