M1/M2 can boot unsigned code and don't have flashable firmware, so I'm not sure it's actually possible to update it in a way it stops booting Linux.