I bet they have some pretty robust hardware watchdogs that allow rebooting, booting from firmware OTA etc. in case of local data corruption.

Here's a great talk on roughly this topic: https://media.ccc.de/v/38c3-hacking-yourself-a-satellite-rec...