What is terraform plan -refresh-only intended to detect?

The terraform refresh-only command is intended to detect state file drift. This command synchronizes the state file with the actual infrastructure, updating the state to reflect any changes that have occurred outside of Terraform.

From terraform plan -refresh-only:

"Use this to detectdrift, i.e., changes made outside of Terraform."

It compares actual infrastructure to what's recorded in the state file.