Allowing an application to run with privilege is different than allowing an application to crash the kernel. These are two different things. CloudStrike is eff

Allowing an application to run with privilege is different than allowing an application to crash the kernel. These are two different things. CloudStrike is effectively running as a Windows kernel module. Which in Windows, might as well be the Windows kernel itself. There should be a deliberate difference between things that a bare operating system needs to function vs. things which are allowed to execute in a privileged manner. This isn't a restrictive operating system. You have to trust your operating system vendor just a little more than you trust the 3rd party software installed on it.