It's definitely the driver itself if it blue screens the kernel. Quite possibility data-sensitive of course.
The driver can't gracefully handle invalid content - so you're kinda both right.
[0] brody_n77 is:
Director of OverWatch,
CrowdStrike Inc.