@pyrignis I wrote an article on this topic in early March because I shared your concern.
Important snippet
You can use ostree admin config-diff to see the differences between your booted deployment’s /etc and the OSTree defaults. A command like diff {/usr,}/etc will additional print line-level differences.