He doesn't have the 24 word pass phrase so I don't want to update the firmware which will reset the device.
How do people end up in this situation? Without that backup seed mnemonic, users are sitting on a ticking time bomb... one small accident and all their funds are gone.