I would like to reflash the unit with the same firmware to see if it corrects a discarded share issue. Getting about 86% of shares discarded, with no latency/router/connection issues. 5 hours on and 1062 accepted and 7909 discarded.
Wanting to avoid loosing SSH access and bricking the machine.
It's pretty normal to have more discarded shares than accepted, you are probably worried about it because you don't understand what discarded shares mean, you can find plenty of explanation on google or this forum, no firmware will "fix" that for you because it isn't a problem in the first place, unless it shows the wrong status on purpose for some marketing purpose.
But just to answer your question, all S9 firmware versions are "removable" with an Sdcard, but if don't want to go through that process, avoid every firmware that has the word "Secured / Security" in the description, so basically all the 2019+ firmware versions.