The Update Method
The "PSN Update" isn't done by SSL. In fact, it is a crappy txt file that says which is the latest FW version, and gives the link to download the latest FW. Any skilled IT person could simply set up his own "PSN Update" server and point it to a custom FW file. It just won't be possible to stop these things.
If anything else fails, the hardware flashing mechanism will work. The ROM keys were compromised.