Agree, but in addition, the situation that created this problem will soon be resolved when eBPF for Windows goes to prod. It won't be possible to bluescreen a W

Agree, but in addition, the situation that created this problem will soon be resolved when eBPF for Windows goes to prod. It won't be possible to bluescreen a Windows box just because EDR has a bad update. The situation(s) that make EDR valuable, however, are not going away. Not just for prevention, but for detection and threat hunt, EDR in general and CrowdStrike in particular have pretty much eaten the market that was once shared by network detection, etc.