This is the sort of complexity about big APs that I dislike, compared to MCUs where I can just slap a vector table and my initialization code right into the start of flash and it will work the first time, every time.
And if there's a problem I can just debug it (unless I've blown the disable-jtag fuse). But the default state is "you are expected to be able to troubleshoot unless you lock it down".