[jojobas]

Chances are the public key is stored on the same flash, preventing sideloading of an OTA update, rather than physical access.