What "tight policy" is that? The one in place on Planet Ross?

Or do you direct end users to configure their kernels themselves (not a single distro recommends this)?

In your world, people would have to recompile their kernel just for plugging in a new USB key.

Silly.