[sli]

That second point can be mitigated by not allowing unsigned code to run in parallel with a game, and generally sequestering games and unsigned code so they cannot mix. I'd consider that a fair tradeoff.

I mean, it may open up another vector for attack running unsigned code without any protections by the console, but... well, those already exist right now. The Switch, for <=3.0, is already broken (rohan[0], which is not yet publicly available).

[0]: https://reswitched.tech/rohan

[EpicEng]

Or they could just lock down the system and prevent all of these problems with less effort... which is what they did.