The kernel provides networking because it doesn't trust userspace to do it. If you provided a low level networking API you'd have to verify everything a client

The kernel provides networking because it doesn't trust userspace to do it. If you provided a low level networking API you'd have to verify everything a client sends is not malicious or pretending to be from another process. And for the same reason, it'd only work for transmission, not receiving. That and nobody was able to get performant microkernels working at the time, so we ended up with everything in the monokernel. If you do trust the client processes then it could be better to just have them read/write IP packets though.