you can use sysNAND and accept nintendo updates on it without any need for emuNAND, if you follow the plailect a9lh guide meticulously. correct execution of the guide's final steps will protect the exploit from getting erased by a nintendo update. aureiNAND CFW provides this protection by default, while cakes CFW requires you to select an option which does it.