thank you for the great adviceFor the record, if you want to use multiple accounts, (I have kids), set them up first, booting a clean system and add the accounts, link some of them to nintendo IDs if you want. It is possible to add accounts to emunand, but it hasn't always worked great.
Then (for extra security) block the Nintendo Switch in your router (MAC-block), disable wifi, set up hekate+atmosphere and enjoy your system
(With blocked internet, software can't be downloaded to the switch, obviously, but it's a personal choice to disable internet)
i have more or less figured it out to do what i want it to do. if i get stuck then i may ask on here.