Um, in Microsoft's defense, wouldn't security companies in the “ah, uh, yes, it would be nice if we had stuff to secure outside the kernel” mode be a gigantic load of crap? At the time of the development of which version of Windows was it that they were all screaming at Microsoft for wanting to restrict kernel access, because it would have forced them to remake a large part of their software and they didn't want to hear about it?
www.techspot.com/news/104710-microsoft-plans-move-security-software-out-windows-kernel.html