

Fundamentally the reason they want to use kernel modules is to observe the system for other executables interfering with the game. This is a hacky solution at best
The TPM hardware can support attested boot so you can verify with the hardware nothing but the verified kernel and userspace is running. That gives you the same guarantees but without letting third parties mess with your kernel.








The main thing I got from that is drug pricing is complicated. At least the extra expenditure comes from widening the pool of available drugs rather than just the prices of existing treatments being put up.