Added to that - a hardware based watchdog, which if not properly exercised by running code in the main software firmware, resets the device back into recovery mode/LKG/Safe Mode - whatever you want to call it.