It almost certainly includes some kernel modification that was required. or it could be that the WebKit component that Safari and other applications use as an API layer needed to be patched and a reboot ensures all components running get the patch. There is also some sandboxing technology that is used for other things besides Safari and that is implemented in the Kernel.