‘read’ capability allows general access to /wp-admin (admin back-end).
There is no ‘read-only’ mode in WordPress until some plugin offers its own custom feature for this. Custom programming efforts are required to hide some content from the page (like ‘Update’ button) using JavaScript/CSS, etc.
