The only Checkout notification guaranteed to arrive in order is the new order notification which will arrive first.
While typically notifications don't arrive out of order they occasionally can.
For order state notifications, your solution sounds fine to me, setting the state of the order to the order state notification with the highest serial number.