Replacing the firmware should require physical access for security reasons imho.