Doesn't giving kernel mode access mean that if the game developer's CI is hacked, an attacker could push full compromise exploits down the channel?

Aren't there some security benefits from trying to confine apps to user land?