The prudent manufacturer makes sure that some of the firmware is truly immutable, to prevent bricking the device if some firmware version is botched enough.

I'm not proposing that no hardware ships with firmware. I'm proposing the hardware manufacturer choses: enable updates and don't ship the parts that can be updated, or disable updates entirely.