Yes. I’m no security expert, but ebpf always seemed a bit weird to me. But in the end how much different is it from kernel drivers?

Shush, this is an opportunity for people to dump on Microsoft, if you take it from them they’ll turn on you.