It's like consoles, you can spend many many hours setting up your ultra-secure code signing boot procedure but what good is any of that if you use it to sign fi

It's like consoles, you can spend many many hours setting up your ultra-secure code signing boot procedure but what good is any of that if you use it to sign firmware with an ancient WebKit version that allows code execution? Same thing that happened here, the code signing works fine but it was used to sign code with trivial format vulnerabilities running in an environment (RTOS) that doesn't support any sort of isolation.