Finding a new exploit is the real problem. Also, most devices have OS's, including the original DS, has an operating system. The real problem here is the software is updatable, not that it has an OS.
Using Emunand is actually pretty safe, seeing as it loads a NAND image from the SD card, not...