This is a big deal because most serious uses of the ESP8266 (e.g. using BearSSL), require significant free RAM and 4K is a big chunk of that.
Despite the security issues, WPS remains by far the easiest way for non-technical users to pair a device with their AP. Is there any hope of making the 4K needed for WPS a dynamic allocation prior to starting WPS or of reclaiming that 4K after WPS finishes?