• •Hacker News discussion argues that traditional patching of IoT kernels is failing to keep pace with evolving hardware vulnerabilities.
• •The 'native immunity' approach proposes building systems that are inherently resistant to exploit patterns rather than reacting post-incident.
• •It remains unclear how manufacturers will reconcile the high R&D costs of building 'immune' kernels with the market demand for low-cost IoT hardware.

Software engineers on Hacker News are advocating for a transition from traditional patch-based security models to 'native immunity' for IoT device kernels. This shift challenges the industry standard of issuing firmware updates, which currently struggles to mitigate the sheer volume of zero-day vulnerabilities in low-power devices. While the concept promises more robust protection, it faces significant friction due to the legacy codebases and resource constraints inherent in modern IoT manufacturing. Whether this architectural change can be implemented without drastically increasing retail hardware prices remains the primary unresolved question.