The more complex the code placed in kernel mode, the greater the risk, a persistent issue with kernel drivers on any operating system. This was a key decision we made at the very beginning of Capsule8: we would not be a kernel module and only use kprobes/uprobes as provided by the Linux kernel so that we could never panic the kernel. The most straightforward way to prevent third-party drivers from causing system faults is to move them out of kernel space and prohibit third-party code execution in kernel mode.