Security professionals need to start getting serious about demanding physical write-enable switches to all embedded systems, so malware won't survive a reboot.

Backup media must be append-only unless a physical write-enable switch is pressed.

Physical write-enable switches used to be standard.

I'm not buying the crazy argument that remote update is necessary to remove malware installed using remote update.