It depends on how it's designed. It wouldn't be that expensive to add a second memory chip. Provide some way to boot to the alternate, when the alternate is running the primary isn't even powered up. Zero attack surface.