This seems like a pretty clear example of the philosophical divide between MacOS and Windows. A good developer with access to the kernel can create "better" se

This seems like a pretty clear example of the philosophical divide between MacOS and Windows. A good developer with access to the kernel can create "better" security software which does less context switching and has less performance impact. But a bad (incompetent or malicious) developer can do a lot more harm with direct access to the kernel. We see the exact same reasoning with restricting execution of JIT-compiled code in iOS.