Yeah this is what I’m confused about. In a lot of simpler devices like this the BMS is actually a daughter board and has no physical connectivity to the main circuits at all. And even if it had access you generally do not have the capacity to rewrite its code, because again code updating is not something that was ever expected.