Yeah, it is controlled by the vendor. If you can't find the option, you will need to use `adb` to enable it that's what I did basically. You can Google it and you'll find what I'm talking about. IRC, it is `pm enable ...`.
Wait hold on, can you not simply just access the underlying volume/block device using an API? The VMs in OCI have a boot volume that is attached, so I reckon it's possible to "mount" this somehow and overwrite it with whatever data you want.
I wonder if something similar exists for the Snapdragon X Elite-based Microsoft Surface 7 laptops but is simply undocumented. There's a post https://news.ycombinator.com/item?id=44426428 (The hidden JTAG in a Qualcomm/Snapdragon device’s USB port) obviously about a hidden JTAG, so I begin to wonder.
If someone more experienced with these sorts of things could chime in that would be great.