Well, as of today I am not aware of any applicable bootchain exploits. Bootroms are small, and it's plausible for there to be no software bugs to find, regardless of how smart your LLM or human brain is (which is why fault injection modchips exist).