With regard to the warranty couldn't you just re-flash the stock firmware as long as whatever recovery you're using is still working?

I could be wrong but I thought the whole point of Knox was that once you unlocked the bootloader and tripped knox once, you couldn't flip that bit back and manufacturers would know you ran an unsigned os