Attacker needs physical access to just one device in the whole product line that uses the same encryption key.

After that, all you need is to get the device to update using the bitstream you made.