Thanks Joel, understood.
I did the same method with unlocked BL, along with all the other methods mentioned by other folks (sideload, extract the BIN repack as flashable ROM, etc.)... they all failed with bootloop. :)
If you attempt the Mediatek exploit, let us know. ;^)