Answer
This is a real limitation, not a configuration mistake — the pre-fill mechanism doesn't get special access to bypass an attribute's non-updatable rule just because a workflow is driving it, so a field that can't be set outside of insert can't be pre-filled by BPA either; plan the flow around creating the record with the right initial value instead of trying to pre-fill it afterward.