ChromeOS on a pixelbook will autoupdate even if you've never logged in and never enrolled. connect it to wifi, use it to browse as a guest... and it reflashes itself. you're just assumed to trust google 100% if you buy the hardware.