They're missing the possibility that the drive might decide to simulate being an USB hub at some point. It can then be both a USB storage drive and a simulated keyboard, and use the second to install something from the first.