2022: A firmware update cannot extract the private keys

2023: It has always been possible to write firmware that facilitates key extraction.