When a proprietary/vendor-supplied out of tree driver includes analytics/telemetry/spyware, it's most likely going to be in a userspace component. Such drivers

When a proprietary/vendor-supplied out of tree driver includes analytics/telemetry/spyware, it's most likely going to be in a userspace component. Such drivers will almost always include at least a userspace configuration tool and often a userspace daemon.