Strange, I recall another thread where someone was complaining that the remainder of the flash was NOT erased when a new program was written, allowing malicious users to extract the code from commercial products by uploading a very short new program that dumps the contents of the rest of the flash. (And, given two devices, you can load that program at different addresses on each one, thus extracting everything)