All chromebooks allow to completely overwrite the firmware.

It requires opening the machine though (and then turning a screw), both as a crude security measure (it's not a drive-by attack if it takes 10 minutes of physical access) and a stability guarantee (without the modification, the system basically can't be stuck, no matter how broken an update might be).

Disclosure: I work on Chrome OS firmware.