I guess you could have the machine format the drive every time it comes back

Yup, that's the plan. You turn it in, it reimages it to whatever the next customer is likely to need, and if a customer asks for something out of left-field, it would reflash and take a bit longer.

Flashing on return is essential because it checks whether the returned item is still in working order, so it really wouldn't be an issue.