Only to activate the new kernel! You can just leave the current one running with minimal issues, even less if you have something like KernelCare live patching security bugs
Assuming any dynamically loaded module will fail, why does KernelCare exist and why is it used so prevalently in web hosting environments? It costs money, so buying it when it doesn't work seems odd.