Zone transfer to secondary NS for availability reasons

Yes, that’s possible. It’s call a “multi-signer setup”, see RFC 8901.