System level (security) updates (including the nextbox package) are delivered via unattended-updates. Factory-Reset is essentially a script (triggered via the hardware button) which is executed and cleans up any user-data on the system, there is no 2nd (recovery) partition.