I'm not too fond of the idea of having the firmware updatable in-place either, but given that the board picture shows it has an ISP header, you could probably disable the self-updating functionality and then you would need to do firmware modifications physically.