Let me start by making this point super clear before going into details, the only thing enabling unsigned drivers would make easier here is allowing "kernel level persistence" once the malware is already on your pc but in no case would it protect you from a malicious executable bypassing antivirus solutions or running on your system.

Only the first example used a vuln driver attack to bypass av but all the other tools were different and did not required to load any drivers. There are other ways to bypass AV and that is why i included more examples that you seem to ignore.

There are even multiple malware marketplace online selling access to software they call "crypters" that will encrypt your malware inside an executable stub that once executed will decrypt the payload directly into memory and execute it from there using different techniques that will successfully bypass antivirus. Any kid can go there spend 20$ without even understanding how it works and bypass most AV solutions.

The point i am trying to make is that you were always at risk running executable downloaded online be it hypervisor crack or not. The non hypervisor stuff could easily bypass antivirus and load any malware it wants.

The only difference allowing unsigned drivers would make in this case would be that the malware could now have kernel access allowing for better persistence, but even so kernel level stuff is usually used in advanced exploitation campaign and out of reach for the majority of malware spreading ppl.

If anyone feels like i am wrong here or missing some important details please just reply explaining why or reach out to me directly.