Is the built-in role Read privilege Find action Aggregate a security flow?

Ops and Admin
1

According to docs the build-in role read has the find privilege action which has the aggregate method. Using this method write operations can be performed, so my question is:

  • by creating a user and granting the read role would allow that user to perform write operations, are the docs missleading, or did I missunderstood the logic of built-in roles?