That's a very good point. Even if so many kernel vulnerabilities are known but just not fixed like the article claims. And even when there supposedly are teams who can penetrate into any system on the globe if given enough time, that shouldn't be on the threat model of 99.9% of the people. I think the most prudent action for the security oriented pleb is to just start using Qubes and some airgapped cold storage method.