Re: Reasons NOT to upgrade?
Sticking it all into kernel space is certainly safer if you are running Windows. Unlike Linux's legacy monolithic kernel model,
Oooh, "legacy". Which sneakily implies "old". Okay.
Windows can maintain true isolation between the kernel itself and running processes / drivers.
You know that Windows is a hybrid kernel, right? Yes, that's right, it has "services" like a microkernel, which run shittily slow but have the separation you're on about. It also has shit glommed into the kernel, which run whizzily fast precisely because they are in Ring Zero, which is exactly where you don't want a web server.
The SUDO point is that on Windows you don't have to run anything as root / admin to give elevated rights - so you have to trust zero code running as admin / root - you can directly give JUST the rights that are actually required.
...and that's why UAC comes up every time a program needs elevated privileges. It's not elevating privileges, just pretending to?
When a program can arbitrarily put shit wherever it wants in the system, then whether it's technically running as the "admin" user or not is really a moot point. You might as well chmod 777 the whole hard drive and then say that it's safe because nothing is running as root.