Wouldn’t it be easier to patch their startup scripts than freezing their kernel?