I won't delve into any details, but 99% certain I know how GeoHot went about making the custom firmware, and a patch is simple and effective.
Now that we have unsigned code ability, much more superior CFW can be obtained, and that option is easily available to us because GeoHot didn't spill the beans.
3.42 CFW is almost a guaranteed release if you ask me.
The decision he made to not release the Custom Firmware was an absolutely brilliant one I think. If he had release 3.21 CFW it would have been immediately patched, and it would prevent us from doing future CFW when it really matters.