It is ok, let it writeable there is no need to change that.
Assuming someone compromises your website there are other more important issues you have to think about. You can restore the uddeIM config quite easy using the built in backup functionality.
If you really want to make it read-only, chmod it to 444.
uddeIM & uddePF Development
CB Language Workgroup
CB 3rd Party Developer