Have you ever looked into the jailbreaking scene?

Some teams give out exploits for free (donations accepted) that allow root access.

Not that far fetched for a more focused team to do better.