The F035 API User's Guide (SPNU493a) mentions that the API needs to be executed in Privilege mode so that it can disable interrupts.
Are interrupts always disabled with every function call?
How long can interrupts be disabled (min, max) when making calls to the F035 API?
What happens if an NMI occurs while the flash API has interrupts disabled?