FWIW, I did the exact same reasoning as you did but in the opposite scenario: only read, never write --> I didn't put the Update key at first. It just asked me to do it.
So, in conclusion, I'm guessing that using HealthKit requires both keys after all. Not sure about the reason though...