Hold on. Don't take what I said out of context and then call it "moving the goal posts".
I said XCI is safer because you dont install them, where as with NSPs, you do.
That is the distinction I used to call XCI safer.
You then gave me a reason for why an XCI can be unsafe (it being able to run malicious code like Pikabricker), yet this same reason also applies to unsigned NSPs. As a matter of fact, Pikabricker was actually distributed as a NSP and not a XCI.
You said that a "good installer" would check to see if your NSP is signed, even though its possible to manually check if a XCI is signed before running also. Sure the NSP's check is done for you which makes it more convenient. But we're talking about which is safer, not convenience. When you download your XCIs via a computer in the first place, its not really a big deal to have to check their signatures before transferring them to the HDD.
So you can take it out of context and call it "moving the goal posts", but I made it clear why I said what I said.
I said XCI's are safer because you dont install them. This isnt just about malicious code. One of the reasons I preferred the idea of mounting the XCIs is because NSP installations have been known to corrupt data on mSD cards occasionally. If I tried to install an NSP and my device randomly froze and crashed for some odd reason, I'm gonna worry a little, not knowing what caused it and what Im gonna be presented with when I reboot the device. I wont have this same worry when using XCIs.
Then later when I said XCIs and NSPs are as safe as each other, I said that in relation to when neither of them have signatures, which was only said once the subject of malicious code was brought up.
I didnt move any goal posts here. But you carry on misconstruing this and then being pedantic about it, while calling
me disingenuous.
So basically you're going to make up the rules of this comparison to suit your argument.
You call NSPs safer just because the software verifies signatures for you, even though manually checking XCIs is a valid argument you dont want to accept.
You give a incomplete list of reasons why people shouldn't be installing unsigned NSPs but ignore the fact that this is still a hindrance and people will still do it anyway. (incomplete because you failed to mention having to install homebrew ports like AM2R as a unsigned NSP)
Why is it ok to create inconveniences like "dont use forwarders", "dont convert XCIs to NSP", etc, but the idea of manually verifying XCI signatures is too much to get on board with?
You're basically willing to jump through hoops to advocate for NSP usage but cant give the same privilege to XCI usage. It kinda "makes you come off as disingenuous".
Well thanks for providing the only sensible and reasonable answer to the whole point of this topic/thread.
And thanks for the advice. I just had to learn the hard way in the end.