Personally, I think it's rather likely that Nintendo did this specifically to prevent their customers from installing custom firmware on devices they purchased, rather than because Nintendo wanted to fix a bug for any sort of perfectionist or altruistic ("user security") reasons. It can just be dressed up as a security issue, so that's what they do if they feel the need to justify it at all.