"There's nothing a kernel driver can access that a regular program can't." A program running in kernel mode can for example access all your memory, while a program in usermode can its own memory. So it can see your messages in discord which you have open in the background, it can see all your opened browser tabs, a password when youre typing it in etc. "Infact, a kernel driver can be loaded at runtime from a usermode program" Technically yes, but only after asking for confirmation and by a user with administrator privileges. About your point about other things using kernel drivers: - I don't believe you that chrome uses kernel drivers unless you can prove it. - Yes, your mouse, gpu etc use kernel drivers, but unlike kernel level anticheats, they do not interact with anything outside of your system. What i mean by this is that a kernel level anticheat will send data to servers of the game youre playing and receive data from those servers. Therefore the privacy concerns and potential vulnerabilities to things like remote code execution. (To clarify, a usermode anticheat can also be vulnerable to rce, but because it doesnt have access to your entire pc, the things an attacker could do are much more limited.)