Isn't this because Windows uses a kernel driver and macOS a user space one? Some overhead is to be expected. I know macOS is a lot more keen on putting things

Isn't this because Windows uses a kernel driver and macOS a user space one? Some overhead is to be expected. I know macOS is a lot more keen on putting things traditionally in kernel into the user space to decrease the attack surface.