The category they list in the $50k context are PSC exploits, or TSEC coprocessor exploit when executing the secure code that bootROM provides it.

So, presumably, current and future key material compromission like on Switch 1