So I started to work on a test for @bifravst:
https://github.com/bifravst/firmware/pull/180
This is a full end-to-end test that runs on real hardware which boots a device
and actually performs a firmware update over the air once the device has
connected.
Doing that I discovered yet another issue: