First Boot After OTA Is Still a Transaction
A successful flash write does not prove the new image can initialize hardware, load state and stay healthy.
bootloader
OTA Compatibility Is More Than a Version String
A firmware artifact can be newer and still be unsafe for the target partition table, bootloader or hardware revision.