I mean the keys can be rotated for future game releases, so extracting the keys from firmware X doesn't allow you to decrypt all new physical games in perpetuity, because past a certain point they'll start using a key that only exists in firmware Y onwards. Key rotation was moot in the case of the Switch 1 since the early models were so thoroughly broken that Nintendo couldn't do anything to stop the new keys from being extracted every time, but it worked for Sony and Microsoft whose systems generally only get one-off software exploits that can be closed forever via firmware updates.