Why it's always worth using additional Linux mitigations such as LKRG? They can stop a zero-day kernel exploit before a patch is published. I've been using LKRG on prod servers for around a year now.