I think it would be a neat feature to add to hijack. Temporarily unpack the upgrade file to empeg/var, replace the player partition, then remove the temp file from var.

The only tricky part is that hijack would be unable to flash itself out of existence to replace the kernel contained in the upgrade file. This would actually be OK if you made sure the .upgrade file and the currently-installed hijack were compatible.