Does the CPU verify the firmware's checksum/CRC/whatever on the stick before flashing itself? That would prevent this sort of thing.