Hacker News Reader

To be fair, that's just the default setup. It's 2 commands to update it to the normal stock kernel.

I know and I did that as soon as I discovered they ship a different kernel.

The problem is they don't advertise "we ship an insecure kernel by default", and they call those insecure images "Ubuntu".

May I ask what are those 2 steps?

sudo apt update && sudo apt upgrade -y

That wouldn't work (even if you should do that anyway). The stock kernel is in a separate package.