It's protected by T2, the reboot disables the system security protection (SSP) temporarily in the T2, which then allows the OS partition to be written to, then it re-enables SSP and reboots. Only 'special' signed code can enable the update mode.