The idea is that nothing, not even Google, can change the change the firmware without first wiping the device or entering the passcode.