Also, probably because grsec's code doesn't meet the standards. By almost all accounts, it pretty much sucks. I am unqualified to opine, but I trust the opinions of who are qualified - by being the people who try to implement it.