> They could offer an API for security relevant scanning for EVERYONE, including their own antivirus software I mean, they have _lots_ of APIs. You'll just nev

> They could offer an API for security relevant scanning for EVERYONE, including their own antivirus software I mean, they have _lots_ of APIs. You'll just never have as much control from usermode as you will from the kernel; what API would make you say "yep, don't need a driver now, can do security fine from user"?