AFAIK the signature mechanism hasn't been defeated, so the attacker can only load software signed by the factory keys.

Which includes old, vulnerable versions and all patched, newer versions. By burning in the minimum version, the old code now refuses to boot before it can be exploited.

This is standard practice for low-level bootloader attacks against things like consoles and some other phone brands.