::
I have a doubt, but I think I received my Trezor One with a firmware. Trezor Suite detected that an update was available. It downloaded and did the update.
Otherwise, I think I read that the bootloader does check the firmware at each boot. If there is a problem, Trezor Suite will reset the Trezor to a reliable state.