The MSP430F1471IPM: The 48 I/O lines in a 64-LQFP package give you room to hang a keypad, a small LCD, and a handful of serial peripherals (SPI, UART/USART) without multiplexing.
Industrial temperature range — where it survives
The POR and WDT peripherals mean you can skip an external supervisor on simpler boards — the brown-out reset and watchdog are baked in.
Flash memory and the firmware update question
The 32 KB Flash is split into 32 K x 8 plus 256 bytes of information memory. That 256 B block is handy for calibration constants or serial numbers that survive a full erase. The Flash is field-reprogrammable over SPI or UART, so you can push firmware updates in the field — no OTP lock-in. Just budget for the erase time if you are updating over a slow link.