Does any OS use capability-based security or other means to categorically lock graphics drivers out of network access, and why does Windows not?