If you open (break) the casing of the Nitrokey Pro or HSM you can update the firmware via ST-LINK or bootloader. The readout-protection is activated so that you can't verify the installed firmware but you can flash your own firmware.

Fill in the blank.