On a correctly signed image, you can adb sideload same-signed updates via the recovery or via update_engine while the system is running.
When locked direct fastboot flashing is the only thing blocked.
2 Likes