I guess this is just a style issue. But why bother loading all the iptables
modules when producing a sysreport for a system that does not use them and
really doesn't desire them?

Solution is quite easy. Attached is a patch that only lists chains of tables
that are already loaded in the kernel. I.e. it prevents sysreport from
arbitrarily loading the rarely-used mangle module, for example. Beware, hardly
tested.