The manufacuring image now enables SELF_UDPATE and NETWORK boot by
default in order to make the initial setup for CM4 based products
easier. For embedded or physically inaccessible products the bootloader
should be updated to disable self-update. Hardware write-protection
should also be configured.

The symlink from pieeprom-2021-02-16 to pieeprom.original.bin has
been replaced with a simple copy of the file because the Windows
installer doesn't seem to support symlinks.