It is frustrating that even forking the Linux kernel means staying somewhat “downstream” of techfash weirdos for quite a while, because what are you going to do, ignore when they find a security issue that also affects the fork?