First, it is another kernel, so I don't know if it has the same vulnerabilities. Second, the big vulnerabilities do not pertain to kernel. Third, it works for me. I have Bitdefender, Panda and Kaspersky just in case. Also, my router is heavily protected: DNS is Cleanbrowsing and I have Diversion and Skynet installed.It seems it's only getting update releases every 6 months? Is this correct? If so, that's not great from a patch/security perspective.