One simple job
A physical key, plus one or more numeric codes with some method allowing them to be assigned and expired. Why does this thing even need firmware updates?
Oh yes, maybe it is because the WiFi module is vulnerable because "being connected" is so much more important than "being secure"...