read only access not possible due to connect needing "cloudsql.instances.update"

[David Thornton]

To connect to an instance and do "read only" things, I think I need to have "cloudsql.instances.update" , but that means I can do changes not just "read only" type things. 

Am I reading that right ?

This is , in my opinion, a problem.

Is there a way to grant connect privileges without giving a user the ability to change the instance?

references:

https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/instances/update