Well I disagree, be able to blacklist modules through config is way faster than having to wait for days, weeks or even months for a proper update to the kernel to arrive and have that being used by VyOS (not to mention if you wait for a LTS version of VyOS).
As far as I can see there isn’t a way to enable the hardware watchdog. I’ve submitted a feature suggestion.