“We do not update the kernel, because the more the features, the more vulnerabilities.”