I think you're overcomplicating it. The primary purpose of field programming is manufacturing logistics. Produce a billion identical devices with identical firmware, and then pair the key once to the car.

So it just needs to block rewrites, and the risk of any security barrier breach is negligible since it's done in factory.

> The primary purpose of field programming is manufacturing logistics

Or if I lose my car key