I'm reverse engineering the switch OS and I found code for a backdoor which allows you to load cart dumps from the SD card, you can't use it normally but it can be unlocked by writing a certain setting to a system save file. I think nintendo uses it for debugging. All it's needed is pegaswitch...