Hi auzn, in a deployed system, the user’s production carrier/enclosure may not implement the Recovery button or the micro-USB port required for flashing. Either way, flashing requires physical access to the module. You may also be interested in these documents about secure boot and the manufacturing fuses: