Our solution to this problem is to permit updates for the company code at any point, given that the update is manufactured clear first (as explained within our latest CACM post) by adding it to some tamper-evidence, https://noransomattack.com