There's a difference, though. Microsoft's Windows Update driver installer does not require launching executables, it never has in the past, it simply got the in

There's a difference, though. Microsoft's Windows Update driver installer does not require launching executables, it never has in the past, it simply got the inf and supporting files and put them in the system's driver location. Now they're automatically running executable code that microsoft isn't verifying as an Administrator. Yes a malicious driver could be bad, but since drivers have a more finite api surface they should call, they can be audited / restricted with static analysis checks. launching a userspace app with admin privileges automatically is a bad idea. Would you be ok with the AMD kernel driver launching a web browser as root on first boot? Or every boot?