ESA have suggested that OTA firmware flash capability may be desirable, however it could be dangerous to implement.