Looking at this I think the easiest thing for me as an individual user (as opposed to mass deployer) is to simply use the surface to make a bootable recovery drive, stick the image recovery program on that, then do a boot->recover image->boot in the unlikely case of disaster. An extra step, but the S3 does everything pretty quickly so no problem.