It does not allow flashing custom kernels (that always triggers open mode), but it enables you to load custom kernel modules if you use the inception exploit to gain needed privileges. And most likely the hole will be fixed at some point, at least previous exploits were fixed quite quickly.