I'm comfortable with validating the @SeedSigner firmware before use, then loading that into the device memory. I also like to keep the validated OS version on a read-only CD backup.