> If you sign your updates and keep your public key on a ROM and there is no way to boot anything else… there's a problem.

As there should be.