This is very fine. Ran it, wondered why CONFIG_SLUB_DEBUG=y (the first red option in the list) took 15s to find the answer: https://github.com/a13xp0p0v/kernel-hardening-checker/blob/0...
Turns out that one is/was(?) a ~%10 perf hit: https://blog.herecura.eu/blog/2020-05-30-kconfig-hardening-t...