This has been asked multiple times in various ways, the answer's the same. Nobody knows, it's likely a new method will have to be made. It's been put into perspective a couple of times. 3DS has been out for 4 years now, XY came out in 2013, the exploits were discovered in 2015. Get the picture?