Yes, but will only boot with an RP2350 plugged in.
So, yes as long as the device doesn't reboot.
Which reminds me of early iPhone Jailbreaks
Post-exploitation, usbliter8 injects a custom USB request handler and stamps PWND:[usbliter8] into the device's USB serial string. From there, an attacker can temporarily demote the SoC's production mode or boot a raw, unsigned iBoot image with no signature checks, stepping outside Apple's chain of trust entirely.
so, custom ROM possible?
Yes, but will only boot with an RP2350 plugged in.
So, yes as long as the device doesn't reboot.
Which reminds me of early iPhone Jailbreaks
Highly unlikely