All hardware devices that allow firmware updates should have two things: 1. A backup recovery read-only image which can flash everything back to square zero vi

All hardware devices that allow firmware updates should have two things: 1. A backup recovery read-only image which can flash everything back to square zero via some sort of hardware over-ride (like a pin-hole button that has to be held down for 10 seconds) 2. A temporary place in memory to buffer and validate the checksum of any new firmware that is uploaded before flashing it. Real time flashing over spotty WiFi (without any sort of post-transfer checksum validation) has got to be the dumbest, laziest, cheapest, riskiest thing a hardware manufacturer can put out, and any manufacturer that does that should be ashamed of themselves.