Default Buying new Note 10.1 p600 (wifi) 2014 edition

Hi, as the title said, my question is what is the latest firmware on the Note currently if I purchased now. Is it 4.3 with locked bootloader like the Galaxy s3 with Knox? If it's, is it possible to flash custom firmware? Thanks.