Consoles manufactured before fw 3.56/3.60 had a flaw in the encryption keys, s#ny generated and used keys that were vulnerable and "easily" broken, consequently devs were able to work them out and defeat the supposedly secure boot process, thus allowing the use of CFWs.
The encryption keys they used after that are a lot more difficult to break, bruteforcing them is out of the question and so far nobody has been able to find an exploit in the first stages of the boot process that could allow us to create CFWs on post 3.56 consoles.
There are still ongoing efforts by a handful of devs to hack that new boot process but for the time being there's no guarantee those efforts will yield the results and data required to finally allow CFWs on all 3xxx/4xxx consoles.