Microsoft can kick security vendors out the kernel, but they can't sell a product that uses APIs not accessible to other vendors.