cure boot validation has been patched such that secure boot is always valid, so you can flash your own TWRP and Custom ROM.2) Don't upgrade to any updated version of Android if you get any through OTA update.