You know, if the kernel of Windows was able to detect mass encryption at the filesystem level like RansomWhere on Mac does, much of this problem would evaporate

You know, if the kernel of Windows was able to detect mass encryption at the filesystem level like RansomWhere on Mac does, much of this problem would evaporate. Then only exfiltration would be a viable threat vector.