What "tight policy" is that? The one in place on Planet Ross?
Or do you direct end users to configure their kernels themselves (not a single distro recommends this)?
In your world, people would have to recompile their kernel just for plugging in a new USB key.
Silly.