It says it is “open source”? Does that mean the firmware can be updated? One of the best things about yubikeys is that they cannot be updated. A physical device

It says it is “open source”? Does that mean the firmware can be updated? One of the best things about yubikeys is that they cannot be updated. A physical device like this that can be updated seems like you are one exploit away.