Please don't call checkpoints a security feature, that's a misconception. They're only there to make skipping signature checks safe in the current synchronization mechanism, but they will not help against importing an invalid pre-indexed block chain database.