Current status: hoping very much that disabling AppArmor in the kernel doesn't still have terrible bugs like it did early in the life of Ubuntu 22.04, when it gave you charming and fatal kernel memory leaks.
Because guess what we just did on all of our user-accessible machines (in an emergency immediate reboot, I'm sure people are happy about that one).