For example the vital computer compares a coded key compiled in the executable code with one read from a physical dongle. If it does not match, the system refuses to start. The dongle must be replaced separately by the person installing the software.
It’s just an example. There are plenty of variants possible.
There are usually also check lists, where the running version is displayed and verified on a safety related display to confirm the upgrade succeeded.
Or does Boeing sell MAXes without that screen altogether? The Boeing update page (https://www.boeing.com/commercial/737max/737-max-software-up...) says it is the "baseline primary flight display" , so sounds like it would be included in all MAXes already, so no physical change may be necessary.
This blows my mind and reeks like other product management decisions I’ve faced in my particular industry where someone said “make that a feature we can enable so we can charge for it”. And they did charge more for it. Now everyone will get it free.
Edit: here’s a source for the claim that there’s always two physical AoA sensors installed anyway: https://aviation.stackexchange.com/a/61109