Protected flash seems pretty secure to me!

What about putting some form of empeg phone home feature into Emplode which announces the player's serial # to help detect the use of stolen players?