this is how pikabricker works, i wrote this
Pikabricker was designed to look like the actual Pokemon Let's Go Pikachu NSP file (4gb)
the actual brick part which is in "romfs" is about 1.4mb (which I have obtained both copies from whom I wont disclose.).
The 4gb portion is just a fake size that was taken from another program which is useless to the "brick operation".
Once the brick payload has been activated it will write to the emmc over-writing prodinfo leaving the console stuck at "SWITCH" logo.
Now this saying, XCI's are not safe either. The developer of the malware could have easy made a xci and modified it / repacked it with malware in it, sx os allows modified
xci's to be ran. End the end this is a stupid thing, all you have to do is take a nand backup.
Thank you

(to those who have broken switches, try building a new nand with some helpful tools (idk which ones))

Write Up By Midstor
===================