In that case, wouldn't it make more sense to build the Linux kernel without those features, or to replace them with sufficient mocks?

You might want to expose more to trusted apps and less to more threatened ones. With kernel shim like gVisor you can have this with little effort.