$20 FPGAs have single event upset modules built in these days. You really think it's that hard to make a 2kB bootloader triple or quadruple redundant?