eBPF does run in kernel mode.

Maybe better than a module, but I wouldn’t say “the kernel doesn’t include any new code”

It’s also why they have to use “integrity” mode of kernel lockdown

If they used “confidentiality” mode, their eBPF code would be untrusted by the kernel and couldn’t be loaded

Impossible. The elite want to know where every penny you spend goes, and it’s too hard with cash

You’re more likely to see credit cards only allowed through Google Pay or Apple Pay than going back to cash

They’ll claim it’s having to support so many third party’s in the chain causing the problem, so we need 2 “trusted” entities