If someone cannot write software update in such way that doesn't turn dangerous hunk of metal into useless dangerous hunk of metal, said one should not be allowed to write critical software for it.
Of course there is another question why it even needs update.