@anon57585045: the reality is that remote updates are pretty much expected these days, no matter how well you plan. So unless you're making the most basic of basic devices, at some point someone will want to change the code.
I spent the last few years working with wearable wireless devices and updating those things over BLE is a royal Pain In The Ass, but it's come to be expected. It's the engineer's job to suffer so the user doesn't have to 