Special switch based firmware update
Hackers?  Once something is out of your physical control you can't stop hackers.  Period.  

That being said, why not a three position switch where one of the positions is momentary? Here is an example - search on Digikey for switch with the 'Switch Function' set to 'On-Off-Mom'