[simonh]

I suppose it's possible, after all if the thing can phone home and update itself, that could be spoofed so it updates itself with your code.

However if that phone home feature is read only, it could always just re-root itself.