As far as I understood a locked device can install other firmware if the current firmware supports it. A cooperative flush, so to say. But not an uncooperative one. Fine for using, not good for tinkering.
Correct. We def don't recommend locked users trying to develop on it. Great way to soft brick it and never be able to get back because the USB pins are locked.