They have tried some experiments in this area, like CLR drivers and altogether different kernel. Nothing stuck for a variety of reasons... Reverting security

They have tried some experiments in this area, like CLR drivers and altogether different kernel. Nothing stuck for a variety of reasons... Reverting security to an insecure state is called a downgrade attack. Can't allow that. What could be done is a better Safe Mode with Networking that would allow for secure remoting over an AD enterprise configuration... And the machines configured to automatically enter that mode. Still bit of a security issue potential.