@jsbarretto @rysiek If the MMU isn't infallible, you have zero security boundaries anywhere. It's what you rely on to have any isolation between processes that are nominally isolated and not permitted to stomp over each other.
Ring 0 drivers are a solvable problem in Linux. You can actually transplant them to a virtualized environment that offers the same formerly-internal APIs, without any rewrites or significant alterations. Not doing that is a choice.