The funny thing about security is it's about the weakest links they find.
So you can harden link A as much as you want if link B is a dud all the extra work on A was wasted energy.
What's most impressive is Xbox realised this and added in Dev mode.
What's shocking is Sony knew this from the PS2 era and gave it up!