PS. There is also an exploit for non-003 variants that could be in theory used to downgrade even PR1.3 variants back to 001, ...