[bmicraft]

Sure you can dive into that rabbit hole and fine tune your kernel, but then you're on the hook for security patches when you could've just enabled livepatch on Ubuntu Server and been done with it.

[doublerabbit]

Ubuntu live update probably works with your own kernel too as long you compile the live patching module within.

Your probably needing less of the kernel patches anyway because your not using the affected drivers.

What do you do when there's no outside internet access for "live patches" or where such services are restricted?

Say, banking?

Either way now we are getting in to pedantic territory. I marked my reasons, you do you.