Oh it's a solution, it's just worse than kernel-level - as it's much easier to bypass.