Well 11.0.1 has been around for quite a long time now so its probably safe enough to be on for most people. As for the way to update the firmware, assuming you do not want go online, you can use either ChoiDujourNX or Daybreak. SDSetup is a great place to find the latest Hekate and Atmosphere as I use it myself personally. As for patches, those can be found here.
You aren't asking the right question. All fusee_primary does is load fusee_secondary. What you should be asking is the difference between fusee_primary and fss0. Fusee_primary is the default way of launching Atmosphere while fss0 is the method Hekate uses to launch Atmosphere. For the most part, they function the same but there are a few differences. Fss0 is faster to load Atmosphere than fusee_primary and if you use fss0, you can enable/disable nogc from Hekate which is easier to manage than the bct.ini if you were to use fusee_primary. Fss0 also allows you to launch sysMMC and emuMMC simultaneously while fusee_primary can only launch one or the other without external modification. Therefore, fss0 is objectively superior to fusee_primary in almost all ways but one. The only advantage outside of purists who don't want to modify the boot method of Atmosphere is that when Atmosphere is updated, you have to wait for Hekate to be updated to use fss0 which is a non-issue if you use fusee_primary.
RCM console are very expensive. So this is not an option. I have almost no problem to stay at a lower firmware, I just feel sorry for the AC updates, I think I cannot update only the game without update the console FW.
Switch scene is a bit strange in this period:
Hackers say that there is no option ever for a fw bug to run homebrew, the only option is to wait for another release of the console, and even with that, there is no news about a software exploit, the hw mod is the only way.
I'm really confused.
[config]
autoboot=0
autoboot_list=0
bootwait=3
backlight=100
autohosoff=0
autonogc=1
updater2p=1
bootprotect=0
{-------- Stock -------}
[Stock]
fss0=atmosphere/fusee-secondary.bin
stock=1
emummc_force_disable=1
# This disables kernel patching and CFW kips.
# Includes exosphere and warmboot, ONLY when >= 7.0.0 and Erista.
# Includes exosphere on Mariko.
# Exosphere/warmboot are not identifiable as it is now.
# This is the closest to OFW, especially when AutoRCM is needed.
{-- Custom Firmwares --}
[Atmo Vanilla]
fss0=atmosphere/fusee-secondary.bin
An easy way while the switch is running, with CFW, linked with usb cable to pc, is an a homebrew app called "Goldleaf". you can use it like a file browser to copy and paste from pc to sd card...takes a bit of learning but is awesome.
And? That is not a reason to not create a nand backup. A nand backup should always be created. A step which is (or should be) automatically.
