At the moment the changes written to the qcow image directly I think? Because delete and recreate the container keeps all the changes.
A option to keep the qcow (base) image unchanged would be great, but save the changes to be container restart save?