@johntimaeus @kentindell @OliverNoble @nuthatch @danluu it's possible that they are required to brick the vehicle in the case of a failed update.

Anything else could involve the vehicle running in an indeterminate state or with a known issue. Both could be liability issues

Of course ideally the update shouldn't fail but that's impossible to guarantee.