Something so critical shouldn't be build with needing to have security updates. It's a design flaw. Make the device physically secure instead.