The thing is most anti-malware products cause perf. issues, but it seems to be the 3rd party ones that actually make your security worse with poorly implemented

The thing is most anti-malware products cause perf. issues, but it seems to be the 3rd party ones that actually make your security worse with poorly implemented and secured features. It seems bizarre to me that commercial paid for security products have such poor coding practices that a lone (albeit very talented) researcher can find so many dangerous security vulnerabilities in them. These vendors should be leading the way in secure coding and design due to the high-privilege level their code runs at.