Hyperbola GNU was save because they still use Python 3.8 for both political and stable reasons.

Python 3.10 is only used for the exploit. You can easily rewrite it for 3.8 as well. The vulnerability itself does not require Python at all.

True. At least I can disable the module in Syslinux as a workaround.