I'm not sure what your objection is to my post. If Ubuntu sets AllowUnauthenticated, then it's Ubuntu's job to check the server logs and at least attempt to analyze what the kernel module actually does. If they find out it's two lines of code and is completely harmless, they can tell all their users that.

The point is that you're using 'binary blob' to sound scarier than it is. With a statue there's no reason to fear it (for reasons explained in other posts). With an image displayer an expert can poke it and then announce there's no reason to fear it.

You're telling me I should be ready to wipe my disks then and there, even though it's just an image displayer, but that's an overreaction. Your analogy just strengthens the point that the park shouldn't panic.