Thanks @Michael, very helpful answer & blog post.
Peplink, perhaps you could consider updating the corresponding KB (at Upgrading Firmware - The Manual Method) to make this clear. Also, perhaps the UI can advise the user which firmware is about to be upgraded as part of the upgrade confirmation prompt.