As a user who does have need for kernel access, because it's my god damn system and not yours, Microsoft's or anybody else's, I don't want it locked down.

It's called security in depth. That means you don't need to prevent all kernel access for users, because there are layers of defense.