Ironically, the only way to get custom firmware onto a system that uses code-signing and other forms of security is often to find such an exploit. (See iOS jailbreaking, Android rooting, console homebrew, etc.)