I am not sure about this conspiracy theory of yours: Microsoft does want third party applications sitting in the kernel anymore.

theverge.com/…/microsoft-windows-kernel-antivirus…