Only allowing signed drivers to run in ring 0 by default makes a lot of sense though. The average user is way less likely to need ext2fsd and much more likely to install randommalwared.