You'd think that the software would sit in a kind of sandbox so that it couldn't nuke the whole device but only itself. It's crazy that this is possible.
The software basically works as a kernel module as far as I understand, I don’t think there’s a good way to separate that from the OS while still allowing it to have the capabilities it needs to have to surveil all other processes.
Something like ebpf.
And even then, you wouldn’t want the system to continue running if the security software crashes. Such a crash might indicate a successful security breach.