The SoC on the motherboard has a special EDL mode

This is kinda like the SoC's pre-bootloader, which loads the bootloader and can be used to flash a new bootloader

EDL mode is locked behind vendor specific certs/keys, so it's unaccessible to the device owner