> non latest *firmware

https://github.com/FreeXR/exploits is a good starting point for that. I think replacing the Android userland would be the tricky part here.