Didn't putting so much rendering code in kernel-space also produce a lot of security bugs in NT? Would be nice to run trustable code in a trusted context if one wants to do so.