Well I disagree, be able to blacklist modules through config is way faster than having to wait for days, weeks or even months for a proper update to the kernel to arrive and have that being used by VyOS (not to mention if you wait for a LTS version of VyOS).