Hi mustardoncheese,
About the ROM, it is the KL28 embedded code which can support the downloading with USB HID, UART directly after boot from ROM mode.
ROM also contains the API write the internal flash, so customer's code also can call the ROM API code to operate the internal flash.
Wish it helps you!
If you still have questions about it, please kindly let me know.
Kerry