Comment by egberts1

Wrong, eBPF is way, way worse.

At the very least, Linux kernel has signed driver modules.