A read-only user connected to an enterprise geodatabase in ArcGIS Pro is able to manually update the alias names and save those changes. Only the data owner should be able to make this schema change.
This issue cannot reproduce at the latest version of ArcGIS Pro. Layer aliases are separate from the data source. Any changes made to an alias for a layer are not reflected in the data source.