The point they were making about embedded devices is that you can't update the certificate being used