Or even doing a reboot after an `apt update` that comes with a kernel update. The livepatch bit only updates the running kernel anyway