Being a fork of Yuzu, Citron has the capability of using proprietary keys to decrypt ROMs on the fly. Even though the actually proprietary part of the equation (the encryption keys themselves) isn’t distributed with Citron, my understanding is that Nintendo successfully argued in court that including the ability to use those keys was in violation of the DMCA. And with how vague the wording in the legal code is, I’m not surprised.

So, regardless of the reality of things, Nintendo absolutely can (and will) sue to have Citron taken offline and charge the guys maintaining it with a crime.

Again, logic and reality don’t matter; only what you can “prove” in the courtroom.

This was a Bad Move™, and this stupid glory seeking YouTuber has just all but killed the project before it’s really even off the ground. As the first lemming said, his greed for views just ruined it for everyone.