Ceph/cephfs have kernel clients (and FUSE ones too), but not server. Server is userspace. It's easier to limit client attack space because to just start attack

Ceph/cephfs have kernel clients (and FUSE ones too), but not server. Server is userspace. It's easier to limit client attack space because to just start attacking client you'd need to MITM the client-server traffic