I mean, hypothetically you might think computer security companies would be full of passionate computer security enthusiasts. And as security tools break a lot

I mean, hypothetically you might think computer security companies would be full of passionate computer security enthusiasts. And as security tools break a lot of security norms - like sandboxing, least privilege, and running in userspace - you might think such enthusiasts would make sure they were coded with the utmost care. That this team of secure coding all-stars would be code reviewing, managing scope, fuzz testing, static analysing, formally validating and suchlike, as befits code running with the highest privilege levels. Surely huge multinational corporations wouldn't grant unlimited privileges to kernel modules written by clowns.... would they? If you believe the crowdstrike marketing, I can see how you might think shadowy saboteurs are the only plausible explanation.