But Ubuntu is not some small distro maintained by unpaid volunteers; they are a corporation that offers paid support. I think it reasonable to be disconcerted when a company that you are paying for security updates is this negligent, especially when other distros have fixed this issue far more expediently.

I would expect paying customer to demand a dicount or their money back, but freeloaders get freeloader service.

They have kernels out you can install if you really need them, they're just not merged into production repos yet.