Other Parts Discussed in Thread: MSP430FR5969
Looking at the MSP430FR235x datasheet noticed that the Memory Organisation table doesn't show the addresses of the BSL ROM:
According to the MSP430™ FRAM Devices Bootloader (BSL) FR235x devices the BSL size totals 3KB at address 0x1000 to 0x17FF for the first 2KB and 0xFFC00 to 0xFFFFF for the remaining 1KB.