The readWrite role documentation explicitly lists all of the privileges included from the read role, except for changeStream.
This was probably an oversight, but seems to be inconsistent.