There's a huge amount of additional complexity required to support paging of kernel components, and getting it wrong results in hilarious deadlocks. Nobody thought it was worth the effort back when the kernel took up a significant portion of your RAM - it's even less interesting to implement now.
Re: Signing kexec blobs?