While I don't disagree in principal, I will submit that:
1. The firmware file was extracted from a zip, which usually doesn't work if the zip is corrupted
2. The upload took place over a wired network that was working fine both before and after the incident.
3. The device could/should have transfered the entire file to device before the flashing process commenced. (Eliminates problems due to network failure)
4. The device could/should have verified the checksum or done some other validation on the firmware file.
5. There could/should be a button (or something) on the device that would restore it to some base (functional) state even in the event of a bad flash.
I work routinely with expensive devices that frequently need to be reflashed and I have never experenced this type of unrecoverable failure. All except the last of my suggestions are a matter of programming and shouldn't be difficult or overly expensive to implement.
Bob