>Finally, Windows nowadays with Secure Kernel, Device Guard, and Virtualization-based Security already cages lots of stuff that shouldn't be freely having fun on ring 0.

Alas, Crowdstrike Falcon.