How does XBox get hacked when it uses Secure Boot?

Voltage glitching. An outside attacker who has direct, extremely fine-grained control over the power supply to the chip can cause it to brown out for one instruction cycle, preventing a result of an instruction from being written.

With enough sophistication, physical access is more powerful than root access, no exceptions.