On one hand you are correctly concerned. On the other hand, how much code are you (and everyone else for that matter) running that is not provisioned by "randos on the internet"? Even if you compiled it yourself, do you check all your kernel code and drivers? Firmware? That can just as easily crash your computer and even make it impossible to recover. If you main worry if that "windows driver" was "Turing Complete" you should be horrified that some kernels even have their own scripting built in or available, BSDs can use Lua, and even Linux has Lua kernel module (lunatik).

You need that type of capability to detect rapidly evolving malware. Otherwise it can just load its own driver and bypass your user mode scanners, or infect all the computers while you're going through the (presumably third party?) certification process.

Best not to overlook the fact the article qualifies its analysis with "probably".

Indeed!