It took the cleanest path available to it within the structure that was already in place. If you "remove the meta-package" you break things like OVI store, and remove any ability for third party repositories to create or indicate which PR version they require. So you then would have to require all CSSU users to not use 3-rd party repos that rely on that, including OVI store and Nokia's base repositories.

Lots. H.E.N. requires KP to do most of the work in connecting to USB devices. TrueCrypt has a package version with and without kernel support, as having kernel-based support would be required for root-volume mounting (and speed improvements, less user/kernel mode switching). Several apps that monitor battery use require the kernel modules to gather that data for them. The repositories are chock-full of "apps" that require kernel packages.

And there are lots of apps that require the latest version of QT, as developers are using features new to that release for performance or coding ease. Nokia saw fit to tie it's QT version to the platform, so changing it requires a change that would break other things unless you do it as a bundle. CSSU has to choose to continue that, or cause CSSU to break lots of other things, which others here have cited as why they wouldn't install CSSU, because it "broke" something. Imagine if CSSU broke OVI store, or QT app installs. Who would install it?