since any KEXT that’s writable by the user is a huge security risk Not I disagree, but this is somewhat mitigated because macOS only loads signed kexts by defa

since any KEXT that’s writable by the user is a huge security risk Not I disagree, but this is somewhat mitigated because macOS only loads signed kexts by default. I think removal is the larger threat. E.g. if I installed Little Snitch, I don't want other software to be able to remove its kext (though I guess the remainder of Little Snitch is not protected by Little Snitch anyway).