I see the current ROS is based upon a rather old Linux v3 kernel. More or less the same as Android.
I see a number of reasons for keeping an old kernel instead of jumping on a v4 one (v5 is next to be launched), and also a number of reasons for doing an upgrade.
For sure it gets more and more difficult to maintain that code and to backport important security patches.
Is there any official statement to support such a choice?