Sure, Rockstar can enforce a minimum software revision to launch the game, but couldn't some homebrew software just (a) lie about the software revision to any running game, or (b) apply any relevant software updates minus patching the kernel vuln?
It seems to me that the cat's out the bag now.
Modern hardware attestation is - if implemented correctly - not beatable unless you decap chips and start trying to extract hardware keys. But the silicon itself is often heavily obfuscated and such a feat has not been demonstrated for modern hardware.
All breaks of modern console security rely on finding bugs or mistakes in the implementation. If the PS5 has got serious exploits then either:
1. They will patch it and revoke old firmwares, as the infrastructure lets them do. Then you have to try and find a new exploit in the firmware that GTA6 was released for.
2. It won't be released for PS5 until later. Xbox security has been undefeated for a long time now, so Microsoft might have an advantage there.
The underlying architectures are quite complex but there are some good tech talks about them online. One of the best is by Tony Chen, which covers Xbox One security. It's many years obsolete now, but even that security system wasn't cracked until long after obsolescence. Microsoft have proven you can build an effectively unbeatable security system for general computing devices even though they only use it for games and multiplayer anti-cheat. It seems Sony might have not reached Microsoft's level.
Maybe AI will speed things up by making it easier to find obscure bugs, but design wise the architectures are sound and can work well.
If someone manages to download and decrypt the game on 1 single hacked console then it's out forever. Even if Sony decides to only allow unhacked firmware it's only a matter of time (months not years) before that version gets a jailbreak too because no complex system can be totally secure.
The only way to prevent this is making the game online only. That would be an extreme sales and reputation hit because it's the type of thing people expect from EA games where single player is a side mode. Not Rockstar famous for their incredible story modes that have always been offline.
Then you can see from projects like ReSkate that to successfully pull it off you would need to make the game effectively a thin client, because if you leave any logic on the console it will get reversed even if parts of it are server only.
And running a full game engine millions of times on your servers gets expensive real fast. Take Two can't afford it, and even if they could, the hit to their profits would be way more than what they can lose from the game getting cracked day 1.
I don’t know how Sonys attestation works, and how resistant it is; but presumably it’s a bit harder than “lie to the game about what firmware you’re running”.
(GTA VI will famously not have a physical release, so you can’t rip data off the disk.)