Comment by Sesse__

> but the point of CVEs is to let you make judgement calls

Realistically, most admins cannot make judgment calls about 1000+ CVEs for a kernel release.