China-Linked Hackers Backdoored Linux Login Software to Hide for Nearly a Decade
(thehackernews.com)
Not really. Immutability can be overriden by root, who can then edit files.
And in addition to that, /etc/, system config files, including pam files mentioned here, are not immuable even in immutable distros.