+1
I totally agree. From my non developeer point of view, it seems to be the best way to have secure upgrade on embedded.
And if a flash goes wrong, simply plug your console cable and choose the other boot option!
If we want to save our RRD graphs, we must have them on the config partition too.
Devs, is there a problem with this solution? (except time :) )