I don't often praise Apple, but their kernel hardening on macOS has been in the form of a deliberate, decades-long plan to move kernel extensions to userspace by providing the appropriate SDKs. Meanwhile Microsoft is running around like a headless chicken.