If the patient updates the Task, it seems there must be certain fields that should not be changed, like code, description, authored, owner, input, etc. because changing those fields would change the definition of the Task.   Suggest invariants or other method to make that clear.  An operation to update Task would even be safer.  Patient app implementers and EHR vendor implementers need more specific guidance.