What are the reasons that
grsecurity patches (or the security features it brings) are not included in the kernel by default. When looking at the benefits for security it seems the vanilla kernel is quite insecure as it is.
If this is a trade-off (some applications where you want to avoid the security measures), it seems that
grsecurity could be an option to enable in the vanilla kernel.
With so many things in the mainstream vanilla kernel, I have a hard time understanding the reasons why the community does not want to include