The custom fields are subscriber editable, and the custom metadata is not protected.
I can update the field values in developer org in a managed app, but when I try to update in subscriber org in the installed package I get the error:
Error retrieving metadata for entities of type: CustomMetadata. Error message: Custom metadata type VAT_Rate__mdt is not available in this organization.
But I can edit the record from the Setup in Salesforce