if you prefer to have security vulnerabilities, you can always pin your kernel version? the kernel needs to keep evolving, and the maintainers will keep your c

if you prefer to have security vulnerabilities, you can always pin your kernel version? the kernel needs to keep evolving, and the maintainers will keep your code updated for free - you just have to open source it.