Flags are 8 per byte, not 1 per byte. So checking flags 0x900 - 0x11FF would only actually affect vars 0x4000 to 0x4090.
None of the flags are safe to use, it's really that simple. Neither are the variables. If you want to make them safe, that's a whole other kettle of fish.