—patch-module is intended to allow replacing or adding content of the given module. The implementation disables the hash checking on the patched module and it's not intended to make a non-upgradeable module be upgradeable. It's a hole in the current implementation that using --patch-module effectively disables the hash checking and the non-upgradeable module can be loaded successfully from --upgrade-module-path.