I'm willing to buy an already exploited one. I mean, I can mod the firmware easily, I'm not a newb, but the amount of effort required to make the JTAG hack work is just too challenging. So many things can go wrong, you have to solder parts and keep your fingers crossed that the kernel isn't patched already.
Let's hope an easier method comes about. Or the dream where you can pop in a USB stick and it exploits the console