No, I did not replace the default kernel.

Randomize_va_space is enabled by default in n810's kernel version, and no COMPAT_BRK enabled.

And grsecurity is still very much a server thing, as a quick look to the supported archs reveals.