I share your feeling, but I'd rather have a none isolated driver I can trust than an isolated one I cannot trust. My threat model includes fishy OEM doing borde

I share your feeling, but I'd rather have a none isolated driver I can trust than an isolated one I cannot trust. My threat model includes fishy OEM doing borderline things. In driver development I often see abstraction violations or very loose abstractions: news hw capabilities can't be accounted for when designing framework abstractions. I have never done dev on windows, but I guess there is a reason why the form factor of things running windows is pretty limited. I don't see how you can have fixed interfaces in an ever evolving wold.