After validating the completed application, can I continue to add read only objects such as reports?

This is entirely dependent on the policies of your company. The addition of read only objects such as reports will not affect data integrity, but the decision to allow changes of any sort to the application is between the developer and whoever the authority for such actions is within your company.