Python 3.10 is only used for the exploit. You can easily rewrite it for 3.8 as well. The vulnerability itself does not require Python at all.

True. At least I can disable the module in Syslinux as a workaround.