The driver runs in ring 0, and talks over PCI bus to some blackbox that is running random source code your web browser just compiled...