> Can we make the kernel vulns less important?

How about strong virtualization? https://qubes-os.org