After upgrading to the latest Tumbleweed snapshot, I noticed that xpad-noone-kmp-default was installed automatically. When the module loads, dmesg shows:
In case of -kmp- ( Kernel Module Package ) packages this is normal. They taint the kernel since they are out-of-kernel kernel-modules.
This does not mean “less stable or insecure”.
No idea why this choice was made. The only way to find out is to contact the package maintainer.