_mongoc_read_concern_freeze() assumes that the level is always set:

BSON_ASSERT (read_concern->level);
BSON_APPEND_UTF8 (compiled, "level", read_concern->level);

This makes it impossible to obtain the BSON for a default read concern (i.e. level is NULL), as is possible with _mongoc_write_concern_freeze().