This. Disabling Was always the first step when we used RHEL years ago.

SEL seems to work under the premise that if it’s too complicated for you to use, the attacker has no chance.