@th nope (not yet at least), I have that chip in a old project I might take out of the boxes at some point (cloud spycam I tore down : https://arthur.lutz.im/blog/2020/04/28/demontage-myfox-security-camera-part-3/ in french). I'd be interested if find ways to hack them.
@arthurlutzim this one doesn't print any sort of useful messages on the debug uart, so I'm going to try reading/writing the TSOP48 NAND flash directly with an in-system programming clip.
Most of the guides I've found (for GoPro models) say that the bootloader prompt can be interrupted, although this one just immediately prints "`booting from primary partition`" and after around 30 seconds something like a MAC address.