one reason to not be willing to rebuild the kernel is that they may rely on a module from a different third party that is shipped/tested for the specific pre-compiled kernels from the distro.
Suffice it to say that there are a variety of reasons why someone either
cannot re-compile a kernel, or just does not want to recompile a kernel.
This change to LSM removes their choice to use modules others than those
provided by their distro vendor.