Clearly the problem is that software with the system access, many security packages need, makes it nearly indistinguishable from malware and is an obvious risk

Clearly the problem is that software with the system access, many security packages need, makes it nearly indistinguishable from malware and is an obvious risk factor in the supply chain. Of course having the cause and supposed solution for the safety and operational capabilities be the same piece of software leaves open quite a few questions.