There must be a version control system so that in the event any updated code crashes the devices, a previous, stable package can be reloaded, restoring functionality.
“There must be a version control system”
Good point. The executable undoubtedly has a revision level that identifies the source code it was produced from. But do they know what revision was running during voting?