I don't like the implied false dichotomy between opening up the kernel and better security. You can definitely have both. Otherwise it's a good report.