Before the keys were reverse engineered the exploits were limited to running userland code only afaik, ie you couldn't replace the firmware/os with those.