> This is rendered even easier by the fact that the kernel is always at the same physical address on Pixel

OpenBSD fixed this back in 2017.