You can’t write programs like CrowdStrike falcon in user space on windows, because windows doesn’t offer the right kind of APIs and hooks from userspace to prov

You can’t write programs like CrowdStrike falcon in user space on windows, because windows doesn’t offer the right kind of APIs and hooks from userspace to provide that kind of protection. On Mac OS CrowdStrike falcon runs in userspace already, and on Linux, the kernel interface is provided by eBPF, which acts as a sandbox, preventing certain classes of crash. So it really is true that Microsoft does not provide safe access like other operating systems do.