I think there’s definitely security concerns which is their highest priority. If the kernel isn’t maintained, security issues aren’t getting patched. You might be able to cobble something together, but there’s going to be holes.

I think they’re paranoid and that’s not a judgment. Rightly so if security is your first priority.