You can of course have updatable secondaries. There is a parameter in the onconfig that needs to be turned on.
The updates get rerouted through the primary and reapplied to the secondary.
It is very slow depending on what you want to do. If it is for an update here and there, ok. However if you want to split the workload on the primary and have half on the primary and the other half on the secondary it is very slow.
Plus, you need to pay for the secondary is you want to do updates or any SQL for that matter.