First, you don't have an unlocked bootloader. You have an exploit of the bootloader that is loki patched to allow a custom recovery. The updates (ME7 and MJ7) have patched that exploit.
You can't put TWRP (custom recovery on your phone if you take any update. The new bootloader will not allow you to flash a custom recovery.
So, what safestrap does is allows the bootloader to boot and check all signatures and the stock recovery to make sure its the only one and it hijacks the bootloader after it sees what it is supposed to see. Then it enters into a recovery (safestrap) basically on top of the existing recovery. The problem with Safestrap is your current ROM is still there taking up space on the phone and you have to use the remaining phone memory to load up other ROMS. The other issue is without Kexec you can't flash and run any kernel but the stock kernel which means only stock ROMs and no ROMs like CM or any AOSP ROMs.
So I would say it all depends on what you want or expect from rooting your device. Just clearing some bloat and you like TW ROMs or do you want to have full control to use any ROMs and any kernels.
Point is... if you ask me, there is no way if you're on MDK should you ever take an OTA. They will port over the new update soon enough as it is. The problem is you can't have any other bootloader on your phone but MDK if you want a true custom recovery.
Galaxy Note 10.1 32GB 2014 Edition
Retired Phones - Now are WiFi Google Voice Phones, Control my AC and heater and PS3 Controllers