A silly question comes to mind:
Is it possible to push the individual system-default applications from an older firmware, into a newer one, using an FG paylad? Seeing as some of these bugs exist in the user applications of the switch in older firmwares, and those applications are legitimately signed by Nintendo, would it be possible to boot a custom payload using FG that downgrades *JUST* the vulnerable user applications, and not the other bits of the firmware? (EG, the checked portions in the boot chain are left completely alone, we just replace, say, the gallery app?)
If so, we could re-introduce some of the exploits using a one-time FG boot on newer firmwares.