But it prevents doing what you just said above : > Developers can ask users for their admin password, sudo to root and largely do whatever they want including

But it prevents doing what you just said above : > Developers can ask users for their admin password, sudo to root and largely do whatever they want including adding kernel extensions and drivers.