Well, it is about time. Now we wait for the other shoe to drop: system-wide BPF disabling via LSM hook and/or sysctl setting. I would prefer a compile-out BPF

Well, it is about time. Now we wait for the other shoe to drop: system-wide BPF disabling via LSM hook and/or sysctl setting. I would prefer a compile-out BPF option (that covers eBPF as well).