Comment by ranger_danger

--ro /usr does not apply to /usr/bin. change it to --ro /usr/bin and then cat will refuse to run.