I am too familiar with this dilemma. A work-around that comes with some caveats is to disable loading of modules. [1] There are more caveats than the article

I am too familiar with this dilemma. A work-around that comes with some caveats is to disable loading of modules. [1] There are more caveats than the article mentions including rebuilding initrd/initramfs can break unless you first reboot. Do not set the settings they mention in a persistent file like sysctl.conf. [1] - https://linux-audit.com/increase-kernel-integrity-with-disabled-linux-kernel-modules-loading/ https://linux-audit.com/increase-kernel-integrity-with-disab...