Could someone use 1 xbox to play flashed games offline and then transfer the memory card?

Yes. I keep my profile on a memory card and whether I play on modded or legit console the achievements transfer with the gamer tag. There is no way for then to tell that an achievement is from a burned game or not.