If we require that to create a reference you have to have write access to the referent, we'll quickly find that everything devolves back to read-only or root-level. For example, if we consider socket-bindings to be privileged resources where you need special permissions to define the socket details, then most subsystems will become equivalently privileged resources.