Honestly, the main reason Xbone is not hacked is developer mode for 20$.
Because people can run their own windows universal apps (emulators) using dev mode, the homebrew or die people are not seriously attacking the console. It was only when linux was stopped on the ps3 that people got serious about hacking it.
If more console makers wold give people homebrew, then less consoles would get hacked.
For example, Nintendo could have easily made a homebrew only flashcart. that could only run homebrew .nds files. Auto dldi-patch+no flash support. presto. There was only ONE attempt at this. datel games and music. it sucked. but could have easily done better. in fact i got my first DSTT for running a homebrew.
A similar tactic could easily have been done for 3ds. a flashcart with no flash support (which all commercial games require) Of course homebrew competes directly with their virtual console, so i can see why they wouldn't want to.
When ps3s let you run linux, there was a truce between the hackers and Sony. They agreed to confine their hacking techs to Linux, and to try nothing more than to unlock the graphics processor to make 3d homebrew. When Sony went back on their word, the console security was attacked mercilessly.
MS has learned the lesson that Sony and Nintendo have not. Give people enough access to do cool homebrewy things, and less people will try and hack your console, meaning less piracy. And dev mode for xbox is much better than linux for ps3 ever was.
And lets' not forget ps2 Independence, which went unpatched until hdloader.elf showed up. Before then Sony was "oh how cute. they are wearing out their memory cards, and running sega genesis emulators. and this didn't crack the mechacon, we don't need to worry". Then UMCDR showed up, and they still weren't worried. "Oh how cute, they now have libraries of NES games on CDR, they still can't use it to pirate." Then hdloader.elf showed, up which copied rented discs to the hard drive, and sony went "Aww, HELL NO" bye bye ps2 independence, bye bye hard drive! In this case, it was the hackers that went too far.