using two partitions in this way on embedded devices has been a trope for a very long time. service/warranty calls are expensive!
usually there are three. system a and system b which are updated and flipped and some sort of emergency recovery that either has a factory image or a very light rom that phones home for a new image.