4 months
I really need to figure out a better sandboxing method for shells. It’s crazy to be things where my keys, browser data, shell history are all accessible.
I do try to use firejail where possible, but it’s quite cumbersome. Every so often I look for tools to help with this, but everything is oriented around making a specific program (e.g. Firefox, steam) work.

I think there’s a bit of confusion due to Microsoft’s insane naming conventions. These consoles exist:
OP is talking about (2).
Technically there has been an exploit found:
https://www.tomshardware.com/video-games/console-gaming/microsofts-unhackable-xbox-one-has-been-hacked-by-bliss-the-2013-console-finally-fell-to-voltage-glitching-allowing-the-loading-of-unsigned-code-at-every-level
But it might be only for (1) and it’s not clear if there’s a practical way to use it yet.