While that is true, it makes sense for antivirus/edr software to run in kernelspace. This is a fuck-up of a giant company that sells very expensive software. I wholeheartedly agree with your sentiment, but I mostly see this as a cautionary tale against putting excessive trust and power in the hands of one organization/company.
Imagine if this was actually malicious instead of the product of incompetence, and the update instead ran ransomware.
Did your god know, insects grow, in my pome? Whoo!
I find that to be the other way around. I would much rather have people ask the second kind of question, whereas the first kind will give me nothing to work with. In the worst case you can answer that you havent read thtose papers and you will after the presentation. At best they can actually teach you something you haven’t considered yet. But often you can respond with your motivation which you generally thought about for much longer than they did.
And let us reject conset with one button, or better yet, automatically.