I think it's a good idea to integrate USB mass storage into CircleOs.
Check the zip in the USB MS 1.1 project for my attempt to do so. There it's already part of the non debuggable area.
Besides the possibility to redirect the irq depending on the activated USB usage (audio, HID, etc), there should also be a protection that when USB mass storage is enabled, the internal filesystem should be readonly or perhaps disabled.