The user is warned when applying an update will interrupt the device's basic functioning, ideally with urgency and expected downtime; safety-relevant devices are expected to keep minimal function during updates (a lock still locks, a thermostat still heats). Status in Table B.1: R C (12) (recommendation, a should provision; conditional on an update mechanism is implemented).
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.