You're generally right about NOR flash being needed to boot, but some vendors support copying
NAND flash into RAM so it can be booted without needing NOR flash - see
http://www.internetnews.com/infra/article.php/2224021 for Samsung and Symbian collaborating to
deliver this. You do need a smarter flash controller though.