The NT kernel supports hot patching because restarting running servers is an inconvenient requirement to remain secure

Apparently end users can just run that insecure kernel indefinitely because… arbitrary product feature tiering?