If using SX OS and want to be safe then use the emunand it offers. Keep your emunand offline as your sole hacked firmware and you can keep your sysnand online (assuming it's clean)
But as people have said it doesn't sound like you even need SX OS/atmosphere etc, you just need to boot to lakka...