Kernel security is good, and more kernel security is better. I'm still hoping that Linux gets W^X (Write XOR eXecute) protection like some BSDs have - it eliminates several classes of vulnerabilities at a single stroke.