'He's out of line but he's right'. I mean, is a bit ironic to give this level of permission to a program that is too malware-like to protect yourself from exactly that. We're talking about hospitals, airports and airlines, government agencies... many critical systems, so much information's security rely on a (foreign for most of the world) private company.

I'm not so sure what is worse. I wish we wouldn't reimplement statist practices in computers, as it often not goes well in our physical world, and invent more resources into OS/network security, compartmentalization and privilege separation. But yeah, the reality is it's easier to put a god-like "trusted" agent in a system. Well, the police need have guns, read all private chats, place security cameras with face recognition everywhere... to do their jobs. Otherwise terrorist attacks or whatever could result in way more damages after all. The same story every time.

Effectively. Kernel level driver intercepting system calls for logging, analysis, and potential blocking.