The subreaper is also gonna have the same footprint as the pidns init, and is more complicated.

It's just as flawed a solution as the other flawed solutions. We can accept the subreaper being bug-free as a requirement for this workaround to be working, but we can't prevent it from being sigkilled.