Traffic flows to the primary SD-WAN gateway, unless the link is outside of the SLA, or completely down. When that happens, traffic routes to the secondary gateway. So, in my understanding, the primary link is used until it fails. When this happens, the one configured as secondary comes up and negotiates the BGP neighborship.