> anyone can write a kernel driver for macOS No they can't. With SIP you won't be able to install it if it is not signed (for kernel extensions only a very few

> anyone can write a kernel driver for macOS No they can't. With SIP you won't be able to install it if it is not signed (for kernel extensions only a very few developers have certificates) and in any case you will be alerted about it. Also there are plans to completely disallow making kernel extensions in release after Catalina (since they can now run in userspace, I imagine that userspace will not get access to pre-installed hardware)