16ms is the watchdog timeout, the rest of the time after the watchdog RESET is the bootloader.
Once you have proved your software, put it direct into a fresh AVR without a bootloader.
Hopefully by then, you'll have tested your software so well, you won't actually need the watchdog.