As far as I know, no one has been able to hack the locked bootloader. Not that I really know of anyone trying. Many embedded devices have hardware pinouts (e.g. JTAG) for pre-shipped firmware re-flashing. That is usually the most effective sure fire way to break in but it is also quite expensive to set up.