I worked at Microsoft early-career and one of the projects I worked on was to integrate with ETW from a Go program to plumb events from Go code into ETW. I would also agree that this is one of the APIs that take a really long time to reason about it and some parts just feel like this API should not've been exposed to anyone who's not on the Windows team at all.