Hi @minsky,
Yes, once secured, JTAG cannot read flash or halt/inspect the core. Changes to the flash configuration will take effect at the next reset:

Also, when allow security is selected, J-Flash reads MDM-AP register, and if security is set to 1, it tries a mass erase in order to unsecure the chip and connect.
Best regards,
Julián