Good grief, I swear nobody actually bothers to read and contemplate what I've said in this thread. If CFW can do things like cloak how many fuses we've burned, and redirect error logs and telemetry the way that creport does, I don't think that swapping out the console cert is out of the question. I know we can't change the actual onboard cert, but cloaking it the same way we do things like MAC Address cloaking or 3DS private seeds should be possible.
If Team Xecuter could figure out how to get emuNand working on the Switch, it's only a matter of time before Atmosphere and other CFWs support it. And yes, emuNand can and is already being used to avoid bans. No, nobody is trying to claim that it can magically "unban" your Switch, and no, there's no fool-proof solution for playing pirated games online and avoiding being banned. But if you keep your sysNand clean and strictly keep your CFW usage to emuNand, and also keep your emuNand offline, you can successfully avoid being banned and not worry about Nintendo finding out about your hacks while in stock sysNand playing online.