That second point can be mitigated by not allowing unsigned code to run in parallel with a game, and generally sequestering games and unsigned code so they cannot mix. I'd consider that a fair tradeoff.
I mean, it may open up another vector for attack running unsigned code without any protections by the console, but... well, those already exist right now. The Switch, for <=3.0, is already broken (rohan[0], which is not yet publicly available).
I mean, it may open up another vector for attack running unsigned code without any protections by the console, but... well, those already exist right now. The Switch, for <=3.0, is already broken (rohan[0], which is not yet publicly available).
[0]: https://reswitched.tech/rohan