[Too]

Do these payment terminals have secure boot or other forms of update payload verification?

In that case the risk of accepting malicious updates from insecure touch screen would be much less.