Blacklisted (via `blacklist MODULENAME`) modules are only blocked from
being loaded during the boot process, but are still loadable with an
explicit `modprobe MODULENAME`, and (worse!) via kernel module
auto-loading.